I bought a switch capable of port mirroring. Use a mac and need to monitor another mac on my wireless network. I need to know how to set up the system and use Wireshark. I don't have a PC or Mac close to the router/switch. I have multiple wireless routers if that matters, but don't have to use them. Thanks
asked 19 Dec '11, 20:30
OK, so that network isn't too complicated. Most of your traffic is probably between the machines with Wi-Fi access and the wireless router, so if you plug the wireless router's Ethernet connection and the cable modem's Ethernet connection into the switch, and set up a monitoring port on the cable modem and plug one of your Mac's Ethernet ports into the monitoring port, and have Wireshark capture traffic on the Ethernet port (
I.e., with this setup, you don't need to use the monitoring machine's wireless interface to capture all the traffic.
answered 29 Dec '11, 00:37
Guy Harris ♦♦