This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Is it possible to find the packet transferred in another device ( Say TV, STB ) in the same network using wireshark ?

0

Is it possible to find the packet transferred in another device ( Say TV, STB ) in the same network using wireshark ?

asked 24 Mar '15, 21:23

Magesh%20Gopal%20Sivan%20Devar's gravatar image

Magesh Gopal...
1111
accept rate: 0%

The simple answer is yes. A computer with Wireshark and WinPcap will capture all network traffic when connected to a network. Now you need to find some kind of marker in the packet (MAC address, IP address, protocol used, etc.) to determine which packets are coming from/going to the device of interest. Can you post a capture to either dropbox or google drive and provide the link here?

(25 Mar '15, 06:16) Amato_C

Okay Guys. Can you please tell me how it is ?

For Example:- My PC IP is :- 10.197.13.88(Runing Wireshark and WinPcap) , My STB Ip is : 10.197.13.89

If I want to collect the packet transferred between my STB(10.197.13.89) and other STB( Say 10.197.13.90) with Same network.

What Can I do to collect the packets from my PC.

Line by line explanation helps me more, For easy understanding.

Picture representation also help me!!!

Waiting for your response !!!1

(25 Mar '15, 06:49) Magesh Gopal...

So how are these device connected, wired Ethernet, WiFi or something else?

(25 Mar '15, 06:51) grahamb ♦

Please make yourself familiar with the Wiki contents referenced in the answer. This will guide you in the right direction.

(25 Mar '15, 09:45) Jaap ♦

One Answer:

0

It depends.

It depends on the network media, is it wired Ethernet or Wireless and it depends on the components in the network, e.g. is there a router, switch or hub.

Capturing on a broadcast network such as WiFi can be done given a suitable wireless NIC, drivers and OS (note Windows is deficient here, without special hardware such as an AirPCap adaptor). See the Wiki page on Wireless Capture.

Capturing on a wired network usually needs the cooperation of the switch to mirror traffic, or the insertion of a hub or tap. See the Wiki page on Ethernet Capture.

answered 25 Mar '15, 06:40

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

It is connected with wired .

(25 Mar '15, 07:54) Magesh Gopal...

OK, so presumably both your PC and the two STB's are connected to a router of some sort, what is that device?

(25 Mar '15, 07:59) grahamb ♦

It is a de-link connector.

(25 Mar '15, 10:00) Magesh Gopal...

Presuming you mean a D-Link router, then it's likely acting as a switch and as they're generally "home" class devices it won't easily span or mirror a port. Again I refer you to the Wiki page on Ethernet Capture in particular the section on switched Ethernet.

(25 Mar '15, 10:19) grahamb ♦