ngrep is a powerful tool which enables network administrators to view packets travelling across the wire in real time. This is a useful item for both security audits and reverse engineering.
By running ngrep on router level devices, it is possible to see where closed source devices such as Playstations and Wiis are phoning home for updates.
Below is a sample command run on my router to view all traffic on interface br0, travelling to or from host 192.
Read more →