This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Just getting my own logs . . .

0

I have a macbook pro mid 2010, ios10.9 I installed Wireshark, and watched the tutorials. It works but only on my computer, but not on any other device. Any suggestions? Oh, I disabled my mac firewall. Good idea?

asked 03 Oct '14, 20:05

fentonnyc's gravatar image

fentonnyc
11223
accept rate: 0%


One Answer:

0

Wireshark will only "see" traffic that is reaching the interface that you are capturing on. Another computer sending traffic to a common router or switch toward the Internet (for example) is not going to reach your computer's network card, so Wireshark won't see it.

To get traffic from other systems, you need to get that traffic to your system's network card. One common method is "port mirroring", where traffic to and from one interface on your switch or router is 'mirrored' on a port that your machine is connected to, allowing it to listen in with Wireshark.

answered 03 Oct '14, 20:46

Quadratic's gravatar image

Quadratic
1.9k6928
accept rate: 13%

"Port mirroring"? How do I get that?

(03 Oct '14, 20:52) fentonnyc

Network switches often support port mirroring as a configurable feature, though it's not common in home networks.

Either way, the challenge of how to get a particular type of network traffic to your computer is one that you will need some basic networking knowledge, and knowledge of how your own network works in order to solve.

(03 Oct '14, 22:00) Quadratic

See the Wiki page on Capture Setup and the appropriate sub pages listed at the bottom for the particular media you are capturing on for more info.

(04 Oct '14, 01:45) grahamb ♦