This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi

I have a PC with Wireshark installed, the program starts and runs OK but only sees a few IP addresses on the network - there are 1000 public & private IP addresses. Am I missing something fundamental?

asked 12 Jan '12, 11:55

stevewarden0's gravatar image

stevewarden0
1333
accept rate: 0%


Yep: :)

Undoubtedly, your PC is on a switch which will send to your PC only packets addressed to your PC (and also broadcasts).

For more info see:

http://wiki.wireshark.org/CaptureSetup

http://www.wireshark.org/faq.html#promiscsniff

permanent link

answered 12 Jan '12, 12:05

Bill%20Meier's gravatar image

Bill Meier ♦♦
3.2k1850
accept rate: 17%

edited 12 Jan '12, 12:10

You are probably behind a switch of some sort within your network. You should read the Capture Setup article on the Wireshark wiki; specifically try to understand the Switched Ethernet section. Additionally, you may want to look at the Wireshark User's Guide for more information.

permanent link

answered 12 Jan '12, 12:08

multipleinterfaces's gravatar image

multipleinte...
1.3k152340
accept rate: 12%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×178

question asked: 12 Jan '12, 11:55

question was seen: 2,926 times

last updated: 12 Jan '12, 12:10

p​o​w​e​r​e​d by O​S​Q​A