I have three machines on my VLAN- A, B and C, all running Ubuntu. If I run Wireshark in promiscuous mode on, say, machine B, I am unable to see the traffic between machine A/C and the internet. The LAN traffic between them is detected fine. Where am I going wrong? asked 28 Aug '12, 02:23  pnp |
One Answer:
You're capturing at a switch, and a switch will not push all packets to all ports like a hub used to do. That means that the conversation between A and C is bypassing your link to B, which is why it can't see the traffic. Please take a look at http://wiki.wireshark.org/CaptureSetup/Ethernet answered 28 Aug '12, 02:28  Jasper ♦♦ |
