I would like see all packets incoming internet on my LAN. I have try "ip.dst == 10.0.0.0/24 and ip.src != 10.0.0.0/24" and doesn't work. My lan is 10.0.0.0 and 255.255.255.0 any ideas??? sorry my bad english asked 15 Apr '14, 07:45  Gregs |
One Answer:
Depending on the capabilities of your internet router you may be able to capture there as all internet traffic will be flowing though it, or make it mirror or span the traffic to another port to which you can connect your machine making the captures. Depending on your environment have a look at the Ethernet and WLAN capture pages. answered 16 Apr '14, 10:11  grahamb ♦ |
That filter works for me (substituting my network address, of course).
@Gregs: not to sound annoying, but you do realize that's just a filter to reduce which packets are seen, right? It doesn't make Wireshark receive packets for your LAN if it wouldn't have already received them without the filter. Wireshark can only capture what gets received by the PC it's running on. The filters are just used to reduce those already-received packets, so that you don't see the packets you don't want to see. (sorry if you already knew that... some people don't)
@Gregs, for more info on capturing, see the Wiki page on Capture Setup.
@Hadriel
yeah thanks for advice.
Maybe for see all traffic have to install wireshark at each computer. I think that could get packets of others computers.
My initial idea was filter all traffic incoming internet and exclude internal network traffic.
But is ok I will make some instalations.
Have any idea of another program for do it????