I have the following setup: a router connected to a few wireless and wired computer a hub:
I was expecting to see the traffic of my internet connection on the PC running wireshark, but instead all I see is a bunch of DHCP protocol packets... is my setup wrong? asked 05 Mar '12, 10:21  gamba edited 05 Mar '12, 10:23 |
One Answer:
A couple of possibilities come to mind: First, make sure you're capturing in promiscuous mode. That setting is found in the Capture Options dialog. Second, your "hub" might really be a switch. Some devices marketed as hubs are really switches. If you have a switch, find out if your switch does port mirroring, and if so, mirror either port 1 or port 2 to port 3. If your switch does not do port mirroring, replace it with one that does. answered 05 Mar '12, 10:45  Jim Aragon |
thank you. turns out the device marked as "hub" wa not a hub after all.