# Network Sniffing **URL:** \ **Category:** Penetration Tester\ **Tags:** learning\ **Created:** [July 17, 2024, 10:09pm UTC](https://forums.cybrary.it/t/network-sniffing/217388 "2024-07-17T22:09:25Z")\ **Posts on this page:** 20\ **Page:** 2
**Author:** ![JosephWhite](https://forums.cybrary.it/user_avatar/forums.cybrary.it/josephwhite/32/2407_2.png) [@JosephWhite](https://forums.cybrary.it/u/JosephWhite)\ **Post date:** [September 8, 2024, 10:19pm UTC](https://forums.cybrary.it/t/network-sniffing/217388/21 "2024-09-08T22:19:47Z")
This issue should be fixed now. ---
**Author:** ![peteeWheatstack](https://forums.cybrary.it/user_avatar/forums.cybrary.it/peteewheatstack/32/11_2.png) [@peteeWheatstack](https://forums.cybrary.it/u/peteeWheatstack)\ **Post date:** [September 8, 2024, 10:45pm UTC](https://forums.cybrary.it/t/network-sniffing/217388/22 "2024-09-08T22:45:47Z")
Ok its working be sure and copy the full id. ---
**Author:** ![NullByte007](https://forums.cybrary.it/user_avatar/forums.cybrary.it/nullbyte007/32/11_2.png) [@NullByte007](https://forums.cybrary.it/u/NullByte007)\ **Post date:** [October 1, 2024, 5:27pm UTC](https://forums.cybrary.it/t/network-sniffing/217388/23 "2024-10-01T17:27:32Z")
This is still not working. I tried this multiple times, tried clearing the Cache too. Admin, kindly fix the issue ! ---
**Author:** ![TraditionalTarantula7122](https://forums.cybrary.it/user_avatar/forums.cybrary.it/traditionaltarantula7122/32/11_2.png) [@TraditionalTarantula7122](https://forums.cybrary.it/u/TraditionalTarantula7122)\ **Post date:** [October 10, 2024, 10:42pm UTC](https://forums.cybrary.it/t/network-sniffing/217388/24 "2024-10-10T22:42:46Z")
Hi @JosephWhite – any chance you can work magic again? I’ve been capturing traffic for ~20 minutes and haven’t seen any HTTP traffic. thanks! ---
**Author:** ![TraditionalTarantula7122](https://forums.cybrary.it/user_avatar/forums.cybrary.it/traditionaltarantula7122/32/11_2.png) [@TraditionalTarantula7122](https://forums.cybrary.it/u/TraditionalTarantula7122)\ **Post date:** [October 10, 2024, 10:44pm UTC](https://forums.cybrary.it/t/network-sniffing/217388/25 "2024-10-10T22:44:09Z")
FWIW – I’m experiencing this in the 1.2 guided exercise. ---
**Author:** ![TraditionalTarantula7122](https://forums.cybrary.it/user_avatar/forums.cybrary.it/traditionaltarantula7122/32/11_2.png) [@TraditionalTarantula7122](https://forums.cybrary.it/u/TraditionalTarantula7122)\ **Post date:** [October 11, 2024, 7:11am UTC](https://forums.cybrary.it/t/network-sniffing/217388/26 "2024-10-11T07:11:01Z")
I exited and refreshed the lab. Either the admin got it working, or turning it off and on again was enough. ---
**Author:** ![Eavesdropper](https://forums.cybrary.it/user_avatar/forums.cybrary.it/eavesdropper/32/24484_2.png) [@Eavesdropper](https://forums.cybrary.it/u/Eavesdropper)\ **Post date:** [November 11, 2024, 6:17pm UTC](https://forums.cybrary.it/t/network-sniffing/217388/27 "2024-11-11T18:17:42Z")
![issue](https://forums.cybrary.it/uploads/default/original/3X/d/d/ddd54488a4ed4d84309ed662e84c942d2cd5febe.png) there’s an issue happening when I follow the tcp stream for the HTTP, there is no session key any where ---
**Author:** ![JosephWhite](https://forums.cybrary.it/user_avatar/forums.cybrary.it/josephwhite/32/2407_2.png) [@JosephWhite](https://forums.cybrary.it/u/JosephWhite)\ **Post date:** [November 11, 2024, 6:45pm UTC](https://forums.cybrary.it/t/network-sniffing/217388/28 "2024-11-11T18:45:12Z")
Be sure you are doing your work in the Node:h1 terminal window. ![image](https://forums.cybrary.it/uploads/default/original/3X/5/2/526134d58fa766811b1916b202e791e727598308.jpeg) ![image](https://forums.cybrary.it/uploads/default/original/3X/f/a/fad4ed86609773da76a01d7cf70ba3d8c4b9ecc6.png) ---
**Author:** ![Eavesdropper](https://forums.cybrary.it/user_avatar/forums.cybrary.it/eavesdropper/32/24484_2.png) [@Eavesdropper](https://forums.cybrary.it/u/Eavesdropper)\ **Post date:** [November 11, 2024, 8:11pm UTC](https://forums.cybrary.it/t/network-sniffing/217388/29 "2024-11-11T20:11:55Z")
thank you soo much for your response. I did the same but the session key is still not visible ---
**Author:** ![JosephWhite](https://forums.cybrary.it/user_avatar/forums.cybrary.it/josephwhite/32/2407_2.png) [@JosephWhite](https://forums.cybrary.it/u/JosephWhite)\ **Post date:** [November 11, 2024, 8:16pm UTC](https://forums.cybrary.it/t/network-sniffing/217388/30 "2024-11-11T20:16:13Z")
Please show the contents of the Node:h1 window with all your commands. ---
**Author:** ![Eavesdropper](https://forums.cybrary.it/user_avatar/forums.cybrary.it/eavesdropper/32/24484_2.png) [@Eavesdropper](https://forums.cybrary.it/u/Eavesdropper)\ **Post date:** [November 12, 2024, 6:24am UTC](https://forums.cybrary.it/t/network-sniffing/217388/31 "2024-11-12T06:24:08Z")
![follow tcp stream](https://forums.cybrary.it/uploads/default/original/3X/5/0/50d44e97fea81f39d5f148e7d1b63f07300754de.jpeg) ![nodeh1](https://forums.cybrary.it/uploads/default/original/3X/f/6/f6c3418ec6d8fa41edb4a8c37d73fecf577c14ec.png) ![Screenshot 2024-11-12 112210](https://forums.cybrary.it/uploads/default/original/3X/a/5/a56a3aeb652e8b68fdebea4d5e4b40a617e7d9e7.png) Yes please, i’ve attached screenshots of my nodeh1 and wireshark window ---
**Author:** ![Eavesdropper](https://forums.cybrary.it/user_avatar/forums.cybrary.it/eavesdropper/32/24484_2.png) [@Eavesdropper](https://forums.cybrary.it/u/Eavesdropper)\ **Post date:** [November 12, 2024, 6:00pm UTC](https://forums.cybrary.it/t/network-sniffing/217388/32 "2024-11-12T18:00:46Z")
Hello Joseph, Hope you are doing well. the network sniffing lab has many issues even with its challenge part I have managed to to access the channel and am sending my query “I forgot my password to lybrary” but bot isn’t replying the expected response which must should be a hint or password ---
**Author:** ![raggetd](https://forums.cybrary.it/user_avatar/forums.cybrary.it/raggetd/32/22425_2.png) [@raggetd](https://forums.cybrary.it/u/raggetd)\ **Post date:** [November 12, 2024, 9:00pm UTC](https://forums.cybrary.it/t/network-sniffing/217388/33 "2024-11-12T21:00:30Z")
Hey BoilingDeer! I just took a run through the Challenge and was able to retrieve the password. The IRC user **hroark** is the one who should respond to your question. Can you confirm they’re present in that channel you joined? See screenshot. ![image](https://forums.cybrary.it/uploads/default/original/3X/1/3/130577002e88886a0fd2eec130c79173ccec8d93.jpeg) ---
**Author:** ![Eavesdropper](https://forums.cybrary.it/user_avatar/forums.cybrary.it/eavesdropper/32/24484_2.png) [@Eavesdropper](https://forums.cybrary.it/u/Eavesdropper)\ **Post date:** [November 13, 2024, 11:38am UTC](https://forums.cybrary.it/t/network-sniffing/217388/34 "2024-11-13T11:38:24Z")
Yesterday, when I accessed that lab, Hroark was not there, but today when I accessed it, he was there and replied with the password. thank you ❤ ---
**Author:** ![brezdot](https://forums.cybrary.it/user_avatar/forums.cybrary.it/brezdot/32/11_2.png) [@brezdot](https://forums.cybrary.it/u/brezdot)\ **Post date:** [November 28, 2024, 12:40am UTC](https://forums.cybrary.it/t/network-sniffing/217388/35 "2024-11-28T00:40:09Z")
Same issue here. I’m doing everything in node: h1 terminal, but when following the TCP stream, there’s no session cookie. ---
**Author:** ![ghost01](https://forums.cybrary.it/user_avatar/forums.cybrary.it/ghost01/32/11_2.png) [@ghost01](https://forums.cybrary.it/u/ghost01)\ **Post date:** [November 28, 2024, 3:53pm UTC](https://forums.cybrary.it/t/network-sniffing/217388/36 "2024-11-28T15:53:39Z")
hroark keeps asking who are you and saying no this is Wendy’s, no, this is Patrick. I tried restarting the lab but he only responds when i give a different nickname than what I found. ---
**Author:** ![raggetd](https://forums.cybrary.it/user_avatar/forums.cybrary.it/raggetd/32/22425_2.png) [@raggetd](https://forums.cybrary.it/u/raggetd)\ **Post date:** [December 4, 2024, 9:13pm UTC](https://forums.cybrary.it/t/network-sniffing/217388/37 "2024-12-04T21:13:36Z")
Hey @ghost01, Were you able to make it through? Those responses indicate that you haven’t logged in as the correct user. Recall that you must enter the channel as the user you identified in the SMB2 traffic. Happy hacking! ---
**Author:** ![Hoele](https://forums.cybrary.it/user_avatar/forums.cybrary.it/hoele/32/11_2.png) [@Hoele](https://forums.cybrary.it/u/Hoele)\ **Post date:** [January 9, 2025, 1:18pm UTC](https://forums.cybrary.it/t/network-sniffing/217388/38 "2025-01-09T13:18:14Z")
Hi, Same problem as many, no session cookie found in the http stream, i guess it expired, can a new session cookie be setup ? ![sc](https://forums.cybrary.it/uploads/default/original/3X/b/5/b58b0ae90215e346b335c177dea8b5c783c3dbd3.png) ---
**Author:** ![raggetd](https://forums.cybrary.it/user_avatar/forums.cybrary.it/raggetd/32/22425_2.png) [@raggetd](https://forums.cybrary.it/u/raggetd)\ **Post date:** [January 9, 2025, 9:55pm UTC](https://forums.cybrary.it/t/network-sniffing/217388/39 "2025-01-09T21:55:23Z")
Hey @Hoele Thanks for bringing this to our attention! I’m happy to say there are no cookie expiry issues here (only because that was an annoying problem…). The actual issue here is much more straightforward - I failed to include the cookie in _every_ request, and you happened to get unlucky in following one of those cookie-less streams. I’ve resolved that issue now, so this lab should be bulletproof 🙂 Let me know if you discover otherwise. Happy hacking! ---
**Author:** ![Griffc](https://forums.cybrary.it/user_avatar/forums.cybrary.it/griffc/32/11_2.png) [@Griffc](https://forums.cybrary.it/u/Griffc)\ **Post date:** [April 9, 2025, 2:54pm UTC](https://forums.cybrary.it/t/network-sniffing/217388/40 "2025-04-09T14:54:38Z")
The Cookie extension does not work. Unable to proceed with this lab. Please help. Thanks. ![image](https://forums.cybrary.it/uploads/default/original/3X/f/c/fca0e8be2c8e637d66ff382cc2074aa44483e6fd.jpeg) [Previous page](https://forums.cybrary.it/t/network-sniffing/217388.md?page=1) [Next page](https://forums.cybrary.it/t/network-sniffing/217388.md?page=3)