Question:

How to capture packets using Wireshark on a Switched Ethernet network?

by  |  earlier

0 LIKES UnLike

I started capturing packets via Wireshark in a office network, but I could only get my own packets. I understand this is b/c of a switch, but how can I capture other computer's packets on the same network?

 Tags:

   Report

2 ANSWERS


  1. 2 things.....

    Make sure you have authorization from your network admin before you start using a packet sniffer such as this. A lot of times, this is an offense worthy of termination.

    Second....It could definitely be because of the switch/network gear. If the switch isn't configured to allow you to see all network traffic, then there's no way you are going to see that traffic. You will see just your own. That's the beauty and efficiency of a switch.

    I'm assuming you went to the Wireshark FAQ with this question....if so, I personally can't help you out any further, as I'm unfamiliar with the product. But just in case you didn't, go here

    http://www.wireshark.org/faq.html#q7.1

    Wish I could be of more help


  2. You can't because it is a switched network.  You can only see your traffic and broadcast/multicast traffic.  You are aware, that in most companies running a packet capture device if you are not a network admin can get you fired?  And the network admins can see packet capture devices running?

Question Stats

Latest activity: earlier.
This question has 2 answers.

BECOME A GUIDE

Share your knowledge and help people by answering questions.