This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Capture packets sent to a specific IP

0

I am playing around with the wireshark for a while now, but I'm still not sure if this is possible.

Is it possible to capture packets sent to a specific IP, not from my computer? Obviously outside of a local network, let's say www.google.com as a brutal example.

asked 16 Aug '12, 21:09

Trfvbg's gravatar image

Trfvbg
1111
accept rate: 0%


One Answer:

1

Wireshark can only capture traffic that is visible on the interface on which it captures. So the answer is yes, but only if you are capturing within the google datacenter on a spot in the network where you know all traffic for www.google.com is passing. You can then set up capture filtering to only capture the traffic in which you are interested.

Have a look at the following wiki pages:

answered 16 Aug '12, 22:40

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245
accept rate: 20%