Hello. I am trying to pin down Keyboard keystroke problems and looking at a possible key logger. Key strokes are missed on random computers by random users with random keyboards and random Windows OS. Running wire shark, I am not sure what to look for on the report output. Thank you.
There are so many ways in which a keylogger can exfiltrate data that it's impossible to give a specific answer. Any (meta-)data carrying protocol is a candidate, e.g., HTTP URL, HTTP header, IRC, SMTP, FTP, you name it. It would require detailed analysis of all communications to see if something cannot be identified as expected/valid traffic, something that may prove difficult in even normal networks.
On the other hand, it would be rather strange if a keylogger would cause keystrokes to be dropped, and thereby attracting attention to itself...
Asked: 2018-05-10 13:38:01 +0000
Seen: 1,942 times
Last updated: May 10 '18
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
