How can a UDP Client and a packet sniffer run on the same machine?
In my understanding, if you have a UDP socket client that is bound to a particular port, then a second UDP client on the same machine can't bind to the same port.
If this is the case, then how can a packet sniffing program like Wireshark run on the same machine you have a UDP client without issues?
wireshark udp packet-analysis layer4 transport-protocol
edited Dec 14 '18 at 6:18
Ron Maupin♦
64.7k1367120
asked Dec 13 '18 at 21:46
FredFred
1185
add a comment |
In my understanding, if you have a UDP socket client that is bound to a particular port, then a second UDP client on the same machine can't bind to the same port.
If this is the case, then how can a packet sniffing program like Wireshark run on the same machine you have a UDP client without issues?
wireshark udp packet-analysis layer4 transport-protocol
edited Dec 14 '18 at 6:18
Ron Maupin♦
64.7k1367120
asked Dec 13 '18 at 21:46
FredFred
1185
add a comment |
In my understanding, if you have a UDP socket client that is bound to a particular port, then a second UDP client on the same machine can't bind to the same port.
If this is the case, then how can a packet sniffing program like Wireshark run on the same machine you have a UDP client without issues?
wireshark udp packet-analysis layer4 transport-protocol
edited Dec 14 '18 at 6:18
Ron Maupin♦
64.7k1367120
asked Dec 13 '18 at 21:46
FredFred
1185
In my understanding, if you have a UDP socket client that is bound to a particular port, then a second UDP client on the same machine can't bind to the same port.
If this is the case, then how can a packet sniffing program like Wireshark run on the same machine you have a UDP client without issues?
wireshark udp packet-analysis layer4 transport-protocol
wireshark udp packet-analysis layer4 transport-protocol
edited Dec 14 '18 at 6:18
Ron Maupin♦
64.7k1367120
asked Dec 13 '18 at 21:46
FredFred
1185
edited Dec 14 '18 at 6:18
Ron Maupin♦
64.7k1367120
asked Dec 13 '18 at 21:46
FredFred
1185
edited Dec 14 '18 at 6:18
Ron Maupin♦
64.7k1367120
edited Dec 14 '18 at 6:18
Ron Maupin♦
64.7k1367120
edited Dec 14 '18 at 6:18
Ron Maupin♦
64.7k1367120
64.7k1367120
asked Dec 13 '18 at 21:46
FredFred
1185
asked Dec 13 '18 at 21:46
FredFred
1185
asked Dec 13 '18 at 21:46
FredFred
1185
1185
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
Packet sniffing applications tap into the lower layers of the network stack, not at the top like your UDP-using applications that connect to UDP at the top of the network stack.
answered Dec 13 '18 at 21:51
Ron Maupin♦Ron Maupin
64.7k1367120
Are you saying that the packet sniffing applications work at the network/routing layer?
– Fred
Dec 13 '18 at 22:04
Even lower than that. Most can capture the Data-Link frames.
– Ron Maupin♦
Dec 13 '18 at 22:05
1
@Fred Usually the packet capturing happens right on top of the NIC, ie. between layer 2 and 3.
– Zac67
Dec 13 '18 at 22:11
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "496"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
noCode: true, onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fnetworkengineering.stackexchange.com%2fquestions%2f55451%2fhow-can-a-udp-client-and-a-packet-sniffer-run-on-the-same-machine%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Packet sniffing applications tap into the lower layers of the network stack, not at the top like your UDP-using applications that connect to UDP at the top of the network stack.
answered Dec 13 '18 at 21:51
Ron Maupin♦Ron Maupin
64.7k1367120
Are you saying that the packet sniffing applications work at the network/routing layer?
– Fred
Dec 13 '18 at 22:04
Even lower than that. Most can capture the Data-Link frames.
– Ron Maupin♦
Dec 13 '18 at 22:05
1
@Fred Usually the packet capturing happens right on top of the NIC, ie. between layer 2 and 3.
– Zac67
Dec 13 '18 at 22:11
add a comment |
Packet sniffing applications tap into the lower layers of the network stack, not at the top like your UDP-using applications that connect to UDP at the top of the network stack.
answered Dec 13 '18 at 21:51
Ron Maupin♦Ron Maupin
64.7k1367120
Are you saying that the packet sniffing applications work at the network/routing layer?
– Fred
Dec 13 '18 at 22:04
Even lower than that. Most can capture the Data-Link frames.
– Ron Maupin♦
Dec 13 '18 at 22:05
1
@Fred Usually the packet capturing happens right on top of the NIC, ie. between layer 2 and 3.
– Zac67
Dec 13 '18 at 22:11
add a comment |
Packet sniffing applications tap into the lower layers of the network stack, not at the top like your UDP-using applications that connect to UDP at the top of the network stack.
answered Dec 13 '18 at 21:51
Ron Maupin♦Ron Maupin
64.7k1367120
Packet sniffing applications tap into the lower layers of the network stack, not at the top like your UDP-using applications that connect to UDP at the top of the network stack.
answered Dec 13 '18 at 21:51
Ron Maupin♦Ron Maupin
64.7k1367120
edited Dec 14 '18 at 6:21
answered Dec 13 '18 at 21:51
Ron Maupin♦Ron Maupin
64.7k1367120
answered Dec 13 '18 at 21:51
Ron Maupin♦Ron Maupin
64.7k1367120
answered Dec 13 '18 at 21:51
Ron Maupin♦Ron Maupin
64.7k1367120
64.7k1367120
Are you saying that the packet sniffing applications work at the network/routing layer?
– Fred
Dec 13 '18 at 22:04
Even lower than that. Most can capture the Data-Link frames.
– Ron Maupin♦
Dec 13 '18 at 22:05
1
@Fred Usually the packet capturing happens right on top of the NIC, ie. between layer 2 and 3.
– Zac67
Dec 13 '18 at 22:11
add a comment |
Are you saying that the packet sniffing applications work at the network/routing layer?
– Fred
Dec 13 '18 at 22:04
Even lower than that. Most can capture the Data-Link frames.
– Ron Maupin♦
Dec 13 '18 at 22:05
1
@Fred Usually the packet capturing happens right on top of the NIC, ie. between layer 2 and 3.
– Zac67
Dec 13 '18 at 22:11
Are you saying that the packet sniffing applications work at the network/routing layer?
– Fred
Dec 13 '18 at 22:04
Are you saying that the packet sniffing applications work at the network/routing layer?
– Fred
Dec 13 '18 at 22:04
Even lower than that. Most can capture the Data-Link frames.
– Ron Maupin♦
Dec 13 '18 at 22:05
Even lower than that. Most can capture the Data-Link frames.
– Ron Maupin♦
Dec 13 '18 at 22:05
1
1
@Fred Usually the packet capturing happens right on top of the NIC, ie. between layer 2 and 3.
– Zac67
Dec 13 '18 at 22:11
@Fred Usually the packet capturing happens right on top of the NIC, ie. between layer 2 and 3.
– Zac67
Dec 13 '18 at 22:11
add a comment |
Thanks for contributing an answer to Network Engineering Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fnetworkengineering.stackexchange.com%2fquestions%2f55451%2fhow-can-a-udp-client-and-a-packet-sniffer-run-on-the-same-machine%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
