This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I have a device that runs an embedded web server that I would like to capture packets from.

Since I can't run Wireshark from the device, I am guessing that I will need to setup a PC (that's running Wireshark) in front of the server. If my guess is correct, then I'm stuck on how to setup the PC to capture packets going in/out of the server - (I searched this forum, but couldn't find any info on how to do this).

If I have the wrong idea on how to go about capturing data for a device that is unable to run Wireshark, please set me straight on what I need to do.

asked 11 Jan '13, 13:33

KTM's gravatar image

KTM
7691314
accept rate: 100%


Obviously, the answer depends upon how the device is connected to a network; If ethernet then

See Ethernet capture setup

permanent link

answered 11 Jan '13, 14:08

Bill%20Meier's gravatar image

Bill Meier ♦♦
3.2k1850
accept rate: 17%

edited 11 Jan '13, 14:14

Thanks for the link - I now need to find an "old" hub. I never realized that when devices are attached to an old hub, that the packets are sent to all ports of the old hub (as opposed to a specific port)... this inefficient way of sending packets over the hubbed network makes it possible for a Wireshark'd PC to see all packets that are going over the network.

(12 Jan '13, 07:27) KTM
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×23

question asked: 11 Jan '13, 13:33

question was seen: 1,909 times

last updated: 12 Jan '13, 07:27

p​o​w​e​r​e​d by O​S​Q​A