This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

wireshark placement

0

Ok, I am a newbie to wireshark and a little confused on what traffic wireshark captures depending on where it is. Okay, for example I am using wireshark on my desktop PC. I have the usual home network setup. "modem connect to wireless router" & "desktop connected to wireless router". What traffic am I suppose to see? just the traffic coming in on my ethernet port through the switch? No traffic from the ISP?

asked 17 Aug '12, 08:57

I_GEEK_IT's gravatar image

I_GEEK_IT
1556
accept rate: 0%


One Answer:

0

You'll see all packets directed to your MAC address, and broadcast/multicast packets. If someone else is using your router you won't see their unicast packets.

Since I guess your ISP is allowing you to access the internet you will of course see everything is sent to your PC (or coming from it). Of course you will not see any Layer 2 headers that came from your ISP since they're exchanged by the router for your local segment.

answered 17 Aug '12, 09:12

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%