When I go to capture the "Local Area Connection", it just says at the bottom.. "capturing in progess..". It seems to take a very long time and I don't see anything within the first 10 minutes. I am assuming it is really not capturing, correct? When I go to capture "Wireless Connection" it gives me data right away. Please advise. Thank you, Peggy asked 11 Jun '13, 10:35  Peggy |
One Answer:
Your local area connection may be really busy which lots of incoming packets, which often leads to Wireshark reacting with delay to anything you do. In most cases it will not even update the packet list because the PC is too busy. Your wireless link is probably less busy, so you can see the data passing by. You could try running dumpcap on a command line to see if the local area connection is receiving packets at all. It has a nice packet counter that tells you how much packet it has picked up, and dumpcap is used by Wireshark anyway whenever you capture packets. I have created a small tutorial on how to use dumpcap in my blog (scroll down to "HowTo: dumpcap"). answered 11 Jun '13, 10:41  Jasper ♦♦ |
Thanks for your response.
Does it matter if I am on my PC and connected to the network or do I have to be connected to the switch, server??
It depends on what you want to capture. Take a look at this Wiki page: http://wiki.wireshark.org/CaptureSetup/Ethernet