I wanna capture packets from a remote computer, let say my friend is chatting with me, is it possible to capture all his ingoing and outgoing traffic by WireShark ? asked 23 May '11, 05:18 nzhacker retagged 24 May '11, 15:56 helloworld |
2 Answers:
Yes or no, depending where your friend is. If he's right next to you, sharing a hub (not switch) with you that will "broadcast" all frames, you can capture everything. If he's on a switch or even at another location then no, you can't. answered 23 May '11, 05:31 Jasper ♦♦ |
I'm guessing at what you're wanting to accomplish, but if you are trying to help your friend resolve a problem and have their cooperation you can use "rpcapd" to do remote capture if you need to get all of the connection-type traffic, plus the upper-layer traffic. Hope this is helpful, John answered 23 May '11, 08:00 John_Modlin |