Question Locked

Wireshark/Protocol analyzer Question

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

If anyone can help with this, it would be much appreciated. I want to set up wireshark on a laptop to monitor network traffic(i.e. http traffic to see if people are on sites they should not be). However when I set wireshark up on a switch it does not pull all the traffic.

How can I set a laptop up with this protocol analyzer, to catch all the traffic?

In case anyone needs to know, my current setup is....

internet-->CISCO router-->switches-->users

5 replies

by scott_heath

If you don't configure Promiscuous Mode to be on it only captures traffic between you and the other end. You are going to get a ton of data though that weill be hard to analyze. I suggest you get Netflow Packet Analyzer software and enable Netflow on your Cisco router. Then you can easily view the number of packets of specific types as well as their end points.

Let me know if I can be of more help.

by d_at_best

Thanks for the tip about promiscuous mode. I will give that a shot and also look into the Netflow Packet Anazlyer.

by older mycroft

My Wireshark works perfectly happily monitoring a wireless network.

Are you wanting to monitor a wireless system? Because that's about as much as I can stand: 6 points of contact on a wireless system and it flies through at a rate of knots.

by d_at_best

No, I'm not trying to monitor any wireless network, just our standard LAN.

This discussion is closed to new replies.