I have few routers that I am playing with. The one with dd-wrt, works fine and I can see all the network traffic on it. for the other network, a linksys, running the stock firmware, I can only see the traffic on my own pc and maybe the router information. But not seeing the other clients on there. very odd. Should I use another interface? Thanks asked 11 Aug '14, 05:00 catcurio |
One Answer:
when doing captures, you will only be able to see devices involved with the transactions, so if you are capturing on your wireless adapter, you will only see traffic leaving and entering that adapter. If you want a good network overview capture at a point where the majority of traffic must travel, such as a router or midpoint proxy in order to see what is going on network wide. If you were in an enterprise setup you could capture at the domain controller to get a good idea of general HTTP requests. answered 12 Aug '14, 13:07 jmadsen |