This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi,

I am using Wireshark on Mac OSX and it is justing capturing the local traffic (so, what happening on my computer, not on the others). I have tried it with Ethernet (LAN) Connection and with a WiFi Connection. It is still not working...

Thank you Florian Traun

asked 23 Oct '13, 13:19

Florian%20Traun's gravatar image

Florian Traun
11112
accept rate: 0%


I hate to belabor the obvious, but is your capture NIC in promiscuous mode? I am not familiar with Apple products, so this might not be the answer.

You will only capture "local" traffic on your WiFi connection unless you get an AirPcap adapter or a NIC that will go into RFMON mode.

permanent link

answered 23 Oct '13, 16:01

randyp's gravatar image

randyp
16225
accept rate: 0%

Also, are you on a mirrored port or using a TAP? You will need to do this to see all traffic on the wire.

(23 Oct '13, 16:04) randyp

Ethernet traffic nowadays work mostly with switches instead of hubs. This means traffic is not sent to all ports. Hence your ethernet port will only see broadcasts and your own traffic.

permanent link

answered 25 Oct '13, 10:17

easterman's gravatar image

easterman
1112
accept rate: 0%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×115
×32
×12
×9
×9

question asked: 23 Oct '13, 13:19

question was seen: 5,290 times

last updated: 25 Oct '13, 10:17

p​o​w​e​r​e​d by O​S​Q​A