Ethereal-users: [Ethereal-users] Newbie question - Session Capture at multiple points for compar

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Charles Marcus <CMarcus@xxxxxxxxxxxxxxxxx>
Date: Thu, 03 Feb 2005 13:01:20 -0500
Hi everyone,

I'm very new to packet sniffing in general, as well as to ethereal, but I have a pressing need to get some information to help diagnose a problem we are having with one of our web-based applications...

I am in the process of reading the User Guide for ethereal, but being new, it will definitely take some time to learn how to use this.

Basically, first I'd like to know if I can even do what I need to do (I still want to learn how to use ethereal, but right now I need to get this data to the Web-application provider), which is:

Capture a session from one particular IP address on an internal network from three different places:

a) coming off of the NIC on the workstation

b) coming off of our Firewall WAN interface, and

c) coming off of the ISP Router WAN interface (T-1)

I'd *like* to be able to do this from my workstation (also on the internal (private IP range 192.168.xxx.xxx) if possible.

So, if someone knowledgable of ethereal would kindly tell me if this indeed can be done using ethereal, I would really appreciate it so I'd know if I was beating my head against a wall or not.

I'd also appreciate any tips on exactly *how* to accomplish this, but for now, just to know if I can would at least let me know I'm using the right tool for the job.

--

Charles