I have three machines on my VLAN- A, B and C, all running Ubuntu. If I run Wireshark in promiscuous mode on, say, machine B, I am unable to see the traffic between machine A/C and the internet. The LAN traffic between them is detected fine. Where am I going wrong? |
You're capturing at a switch, and a switch will not push all packets to all ports like a hub used to do. That means that the conversation between A and C is bypassing your link to B, which is why it can't see the traffic. Please take a look at http://wiki.wireshark.org/CaptureSetup/Ethernet |