
But doing statistics on the data wouldn't be.

What could I do with that?"* will get you in trouble, for instance. you went to ? And this is your POST data? Huh. It's what you DO with the information gleaned from the kept traffic.

You can certainly record network traffic (which may be against policy at the place you're at), but that is not illegal. This is all good to know and all, but the question is if it's illegal. if you have your WireShark computer setup directly on the cable (no cable modem box cable modem embedded as a PCIe card or such.) Such hardware is rather rare, and cable ISPs tend to limit network availability to certain MAC addresses, so the ISP provided modem could access the cable, but not your computer-acting-as-modem (unless you asked them to allow it, which could raise some Red Flags and the request would likely be denied.) Therefore you could actually sniff the data on the coaxial cable WAN. P.S : WinPCap is apparently going to come out with a new version soon that is compatible with Windows 7.WireShark supports sniffing for DOCSIS packets (or s it frames with DOCIS). This will allow all users on the machine to use Wireshark without admin privileges.


This release includes WinPcap 4.1.1, which has support for Windows. Wireshark works without any issues as of version 1.2.3.
