Malware that evades wireshark!?

[lyecdevf]

I browse the net through a limited account and I use open source software most of the time. I do not use an AV so I rely heavily on wireshark but what if malware evades wireshark?

Mebroot can then steal any information it likes and send it to a remote server via HTTP. Network analysis tools such as Wireshark won't notice the data leaking out since Mebroot hides the traffic, Erasmus said.

So what could I use to be 100% sure? I do not know of any other sniffing programs that work as well.

 

[carnageX]

Why don't you just use an AV?

 

[office politics]

i would think you could attach a hub and run wireshark in promiscuous mode. the hub will allways forward all traffic to all ports. wireshark in promiscuous mode will display all traffic.

this is dependant on how the traffic is hidden though.