Wireshark-users: Re: [Wireshark-users] I can't sniff my LAN

From: "Saulpaugh, Chris" <Chris.Saulpaugh@xxxxxxxxxxxxx>
Date: Wed, 28 Jul 2010 12:14:18 -0700

Chances are you may have a switch. If all the port LEDs don’t blink at the same time, then it is a switch.

 

These are two low-cost switches which have port mirroring capability. The recommendation is to not get the NetGear but pay the extra money to get the DualComm. The NetGear has some subtle configuration issues you would have to deal with.

 

http://www.netgear.com/Products/Switches/PlusSwitches/GS105E.aspx

http://www.dual-comm.com/OnlineShop.htm (recommended the Model No. DCGS-2005 Gigabit 5 port switch)

 

There are Wireshark guru’s who use the DualComm switch above in their network monitoring classes. You can google it and find testimonials for the DualComm.

 

You should be able to find a local distributor or mail-order either of these.

 

Cheers,

From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Kok-Yong Tan
Sent: Wednesday, July 28, 2010 12:05 PM
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] I can't sniff my LAN

 

Port mirroring only applies to a switch. And not all switches (especially the cheaper, unmanaged ones) can handle port mirroring.  All traffic in a hub is available to all ports.  You've got to figure out what you've got.  And that link is in Brazilian Portuguese only--maybe a fellow Brazilian or Portuguese-speaking subscriber to this list might be able to tell us what it says.

 

On Jul 28, 2010, at 14:52, Darkk Nights wrote:



I don't know how to configure port mirroring. And maybe it's a hub, and not a switch. This is the one I'm talking about: http://www.braview.com.br/home.asp?pag=Exibir&parent=Switches&chave=107&sb=208&tsb=16+Portas&prod=482

Again, thanks!

--- Em qua, 28/7/10, Anthony Murabito <anthony@xxxxxxxxxxx> escreveu:


De: Anthony Murabito <anthony@xxxxxxxxxxx>
Assunto: Re: [Wireshark-users] I can't sniff my LAN
Para: "Community support list for Wireshark" <wireshark-users@xxxxxxxxxxxxx>
Data: Quarta-feira, 28 de Julho de 2010, 21:01

Hi Darkk,

You need to enable port mirroring to be able to see all the traffic. By default a switch will only send out unicast/multicast traffic that is appropriate to that specific port you are plugged into.

Regards,

--Anthony

On 07/28/2010 01:55 PM, Darkk Nights wrote:

Hi!

I have 8 computers on a local network, all linked to a Braview HUBSW 16NTX switch, and this switch is linked to a Siemens 4200 modem/router, and this to the ADSL line.

I've been trying to monitor what's happening on the network but I only get results to my own computer, and I needed to monitor the whole network using WireShark.

So, what should I do?
Thanks!


 

--

Reality Artisans, Inc.             #   Network Wrangling and Delousing

P.O. Box 565, Gracie Station       #   Apple Certified Consultant

New York, NY 10028-0019            #   Apple Consultants Network member

<http://www.realityartisans.com>   #   Apple Developer Connection member

(212) 369-4876 (Voice)             #   My PGP public key can be found at <https://keyserver.pgp.com>