This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi,

I am trying to monitor the traffic between my machine and a server (windows server 2008)that was created by rackspace in the cloud.

I have the IP address of the server. But there is no data being captured by wireshare for it.

Do I need to setup or enable something on the server or on my machine?

I even installed winpcap on the server and enabled remote packet capturing in services.

But in wireshark it can not find the ip address when I try to add the ip address to remote capture interfaces. It says the server is not responding in a timely manner.

I can ping the server...

I not sure what else to try out here...

Thanks

asked 03 Jun '14, 03:26

Fiona's gravatar image

Fiona
1111
accept rate: 0%

I not sure what else to try out here...

Let's start with the basics ;-)

  • where do you want to capture the traffic? On the client or on the server?
  • what traffic are you interested in. Traffic going to the server or traffic coming from the server?
  • How did you try to capture? On the server itself (by installing Wireshark on it) or on the client?
(03 Jun '14, 05:13) Kurt Knochner ♦

Thanks :)

where do you want to capture the traffic? On the client or on the server? I want to capture the traffic on the client.

what traffic are you interested in. Traffic going to the server or traffic coming from the server? I am interested in both traffic.

How did you try to capture? On the server itself (by installing Wireshark on it) or on the client? I installed wireshark on the client and I tried to capture the traffic.

(03 Jun '14, 06:37) Fiona

I installed wireshark on the client and I tried to capture the traffic.

Did you try to capture the traffic of that client or the whole traffic to/from the server, meaning also traffic from other clients.

(03 Jun '14, 08:32) Kurt Knochner ♦

I am not up to speed with setting up servers and clients as you can tell :) I was capturing all of the traffic on the network.

I am using a browser on my laptop as a"client" - this is being used to connect to the rackspace account where I can create and remotely connect to a server.

And I am running jar of beans emulator as another client on the same laptop - here I can run a rackspace app to also log into my account and create servers.

But none of the captured traffic has the IP address of the created server...

(03 Jun '14, 11:40) Fiona

this is being used to connect to the rackspace account where I can create and remotely connect to a server.

jar of beans emulator as another client on the same laptop - here I can run a rackspace app to also log into my account and create servers.

But none of the captured traffic has the IP address of the created server...

Well, if you connect to the Rackspace (management) server to create the virtual server, why to you expect to see the IP address of the created server instead of the Rackspace IPs you are connected to !?!

Only if you are connecting directly to the IP Address of the new server, without any VPN, Wireshark will show the IP address of that server!

Regards
Kurt

permanent link

answered 03 Jun '14, 12:47

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

Thanks for putting clarity on it for me.

That makes sense now :)

Thanks Fiona

(04 Jun '14, 03:20) Fiona

Hint: If a supplied answer resolves your question can you please "accept" it by clicking the checkmark icon next to it. This highlights good answers for the benefit of subsequent users with the same or similar questions. For extra points you can up vote the answer (thumb up).

(04 Jun '14, 22:28) Kurt Knochner ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×52

question asked: 03 Jun '14, 03:26

question was seen: 1,584 times

last updated: 04 Jun '14, 22:28

p​o​w​e​r​e​d by O​S​Q​A