This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Closing Connections

0

Is Wireshark capable of closing connections to certain ip address/urls from within the program?

asked 23 Nov '15, 14:01

Benn's gravatar image

Benn
6112
accept rate: 0%


One Answer:

1

No, Wireshark is a passive network analysis tool. It cant't send any data to the network, like TCP Resets or similar.

What are you trying to do? Maybe there are other ways to achieve that.

By any chance: Do you want to build some kind of IPS, based on the dissection capabilities of Wireshark?

Regards
Kurt

answered 23 Nov '15, 14:34

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

I'm trying to find a program that can close the connection while it is running for telephone troubleshooting. I work in a phone service company and we are testing loss of connection from the ip address/url. Any programs that would be useful to me.

(24 Nov '15, 05:50) Benn

Please take a look at tcpkill

https://en.wikipedia.org/wiki/Tcpkill

it's part of the dsniff suite, whhich should be part of all Linux distributions.

(24 Nov '15, 05:57) Kurt Knochner ♦

Great. Thank you for your help. I really appreciate it.

(24 Nov '15, 06:34) Benn

Hint: If a supplied answer resolves your question can you please "accept" it by clicking the checkmark icon next to it. This highlights good answers for the benefit of subsequent users with the same or similar questions. For extra points you can up vote the answer (thumb up).

(24 Nov '15, 07:08) Kurt Knochner ♦