This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi,

Like it's saying in the title, my question is:

is it possible to sniff, with wireshark, any information from an IP website to all of the visitors ? And if the answer is "yes", how ? plz.

Or, wireshark can just sniff packets beetween our connexion to others ?

Thanks, (i'm a beginner of wireshark), BR, M

asked 29 Aug '16, 13:35

Yawatem's gravatar image

Yawatem
6113
accept rate: 0%


Capture location would be key in determining what conversations you see. If you are server side, then you can see from the server's IP(s) out to all the clients if you capture off the server's NIC or if you have a Test Access Port just after the server's NIC. If you are capturing from the client side, you would only see your conversation to the server if you are capturing at the client NIC. Your view of client side conversations will change if you capture elsewhere in the LAN (after router/switch) and have other users in the LAN accessing that same site.

So short answer is Yes, depending on what you have access to you can capture both views. If capturing server side, depending on utilization/connections/NIC speeds I would recommend not using the Wireshark GUI but using some of the native libraries (dumpcap, tcpdump). Then you can split PCAPs into more manageable sizes that you can use Wireshark to inspect.

permanent link

answered 29 Aug '16, 13:57

BruteForce's gravatar image

BruteForce
1203
accept rate: 9%

Ok, there is no way for sniffing information from a server to some clients (all of them, by the way), if you haven't got access to the server ? :))

(thanks for answser) :)

(29 Aug '16, 14:03) Yawatem
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×1,620
×205
×19

question asked: 29 Aug '16, 13:35

question was seen: 1,380 times

last updated: 30 Aug '16, 01:29

p​o​w​e​r​e​d by O​S​Q​A