This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Missing IP

0

Hi

I have a PC with Wireshark installed, the program starts and runs OK but only sees a few IP addresses on the network - there are 1000 public & private IP addresses. Am I missing something fundamental?

asked 12 Jan '12, 11:55

stevewarden0's gravatar image

stevewarden0
1333
accept rate: 0%


2 Answers:

1

Yep: :)

Undoubtedly, your PC is on a switch which will send to your PC only packets addressed to your PC (and also broadcasts).

For more info see:

http://wiki.wireshark.org/CaptureSetup

http://www.wireshark.org/faq.html#promiscsniff

answered 12 Jan '12, 12:05

Bill%20Meier's gravatar image

Bill Meier ♦♦
3.2k1850
accept rate: 17%

edited 12 Jan '12, 12:10

0

You are probably behind a switch of some sort within your network. You should read the Capture Setup article on the Wireshark wiki; specifically try to understand the Switched Ethernet section. Additionally, you may want to look at the Wireshark User's Guide for more information.

answered 12 Jan '12, 12:08

multipleinterfaces's gravatar image

multipleinte...
1.3k152340
accept rate: 12%