This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I'm having a lot of trouble capturing TCP packets from another computer. I can see my TCP packets but not the packets from the other computers on my network. I have promiscuous mode on and feel like everything is up. Please don't send me a link to the page that shows the different switches. I've gotten that so many times but I don't quite understand it. People send it to me but I don't understand it. If someone could help me with this problem I would appreciate it.

asked 25 Nov '13, 15:55

Brad6547884's gravatar image

Brad6547884
11223
accept rate: 0%


For the packets you're looking for, are they going from those other computers toward your own?

Keep in mind that if you're capturing packets from your computer, you are only going to see packets that are being sent to or from your own network card. With Ethernet switches (the switches you're referring to?), traffic can go from one computer to another directly without all other computers on the network seeing the packets.

permanent link

answered 25 Nov '13, 19:11

Quadratic's gravatar image

Quadratic
1.9k6928
accept rate: 13%

Also have a look at the Ethernet Capture Setup page on the wiki.

(26 Nov '13, 01:53) grahamb ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×752
×205
×32

question asked: 25 Nov '13, 15:55

question was seen: 3,367 times

last updated: 26 Nov '13, 01:53

p​o​w​e​r​e​d by O​S​Q​A