I was wondering is it possible to capture the packets of other computers on a cable network ? if so is it possible to do it by windows or like wifi windows can't sniff packets from other computers and doesn't support monitor mode ? asked 27 Jul '13, 12:18 Milad Rad edited 27 Jul '13, 23:39 Guy Harris ♦♦ |
One Answer:
There is no such thing as "monitor mode" for Ethernet. There is, for Ethernet and Wi-Fi (and other technologies, such as Token Ring and FDDI), "promiscuous mode", which is supported by most Ethernet adapters and is supported by most Ethernet drivers and by most packet capture mechanisms, including WinPcap on Windows. However, it may not be sufficient to be in promiscuous mode if you're capturing on a switched network. This is discussed in detail on the Ethernet capture page on the Wireshark Wiki. answered 27 Jul '13, 23:50 Guy Harris ♦♦ |
By "cable network" do you mean "a network that uses a cable rather than a radio", such as an Ethernet network, or do you mean "a network provided by a cable television company", so that you'd be trying to sniff the traffic of other cable modem subscribers?
I mean Ethernet like a lan network based on cables in an office