This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Does wireshark have the capability to use remote capture agents in order to get an n-tier view of network traffic? i.e Client-> Web Server-> App server-> DB Server -> Mainframe... There are a number of non-Opensource tools that do this very well (Compuwares GTTA product is particularly good in this area.) It would be cool if you could do similar with Wireshark.(Or maybe you already can?)

asked 04 Dec '13, 06:02

Ian%20Molyneaux's gravatar image

Ian Molyneaux
11112
accept rate: 0%


Wireshark can do that, e.g. when using the rpcapd capture daemon. If you open the capture options and click on the "Manage Interfaces" button you can see that there is a tab for remote interface configuration, where you can configure the details of the remote capture PC.

permanent link

answered 04 Dec '13, 06:12

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

How do i capture the traffic from my client on a network that this IP range different from mine?

currently I communicate with him through the VPN network.

can help me please?

(09 Apr '14, 12:35) jsilva

Does wireshark have the capability to use remote capture agents

yes, as @Jasper said, with rpcapd (part of WinPcap). rpcapd works on Linux as well (maybe also UNIX/*BSD), if you compile it from source. Please don't expect to get a rock stable, production quality tool, as it is not. It works, but ....

in order to get an n-tier view of network traffic? i.e Client-> Web Server-> App server-> DB Server -> Mainframe...

Well, Wireshark isn't necessarily the right tool for that kind of approach. Yes, you could probably build something similar with rpcapd, but I would'nt do it.

Wireshark is superior for manual capture file analysis, but there are better tools to build a whole capturing infrastructure, with capture file indexing, archiving, etc.

Regards
Kurt

permanent link

answered 09 Apr '14, 13:33

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×549
×248
×59

question asked: 04 Dec '13, 06:02

question was seen: 3,332 times

last updated: 09 Apr '14, 13:33

p​o​w​e​r​e​d by O​S​Q​A