Please does wire shark need to use my data for its work? .i e. Must I be online(using my own data) for it to start capturing packets? asked 13 Jun '17, 13:43  Ozor |
One Answer:
Wireshark can load any previously captured traffic from a file without being on-line. To resolve IP addresses to hostnames (if not saved in the file) will need access to an external name resolution system. To capture traffic, the interface you wish to capture on must be enabled, however, Wireshark does not need access to any external resources to do so (apart from name resolution as noted above). answered 13 Jun '17, 14:38  grahamb ♦ |
Thanks. But for the initial capture do I need to b online?
It depends... If you want to capture network traffic, then you'll need to have a network interface that is up, connected to a network. If you want to capture other types on traffic (eg. USB) then you don't have to.