Could someone please tell me at which layer does wireshark capture packets interms of OSI network model?
asked 22 Sep '14, 19:07
edited 23 Sep '14, 11:20
Well, captures are done from the wire, but the lowest OSI layer you get in a frame is layer 2. In most cases that means Ethernet these days. It does not capture things like autonegitiation or preambles etc, just the frames.
answered 22 Sep '14, 20:11