This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

What will capture when i change the ip address.

I install wireshark and i change the ip address of that pc.

From otherside if i change the pc ip address how do i know that pc has change the ip address.

Scenario-1: One pc that i have with wireshark. Ip address is 172.16.15.2 Wireshark is running. Now i change the ip address 172.16.15.4 which is not in the network.

Now what will capture wireshark?

Scenario-2: Now what happen if 172.16.15.4 will in the network?? Does it capture the data with same ip but different mac?

Scenario-3: What will first happen when the ip address change from both end PC.

snp

asked 10 Nov '13, 21:13

snpatel's gravatar image

snpatel
11112
accept rate: 0%


sounds a bit like a homework assignment...

We know nothing about your PC

  • what type of OS is it running
  • what kind of security software (firewalls, endpoint security, etc.) is installed
  • type of interface (ethernet, wifi)
  • network configuration of your OS

As a result, nobody here will be able to answer the questions as they were posted.

Solution: Why don't you start Wireshark on your system and watch what is being sent/broadcasted while you change the IP address !?! Simple problem, simple solution ;-))

Regards
Kurt

permanent link

answered 11 Nov '13, 07:16

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

edited 11 Nov '13, 07:18

IT not a tutorial or assignment. But i am trying to find out that what is going to happen? I am learning wire shark so it is totally new for me. I install it and
simply capture the packet but it is very difficult that just in few second i get lots of data. But i found capture the packet from destination ip address and ip address to type a ip.dst==ipaddress and ipaddr==ipaddress.

Now i just want to know that how can i perform the above task for my knowledge? I hope you will help me to find it out.

Thanks.

(13 Nov '13, 20:56) snpatel

There are all sorts of filters you can run on the data apart from the ip addresses, have a look at following http://wiki.wireshark.org/DisplayFilters

(13 Nov '13, 21:33) Ken15
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×1,620
×146

question asked: 10 Nov '13, 21:13

question was seen: 1,623 times

last updated: 13 Nov '13, 21:33

p​o​w​e​r​e​d by O​S​Q​A