Wireshark-users: Re: [Wireshark-users] How to use a "wireshark sniffer PC" to capture ftp flows b

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Ryan Zuidema <ryan.zuidema@xxxxxxxxxxx>
Date: Mon, 25 Feb 2013 16:48:18 -0700
I think you're making this more complicated than it has to be. You just mirror a port on a switch between the two endpoints. Then the mirror port goes to your laptop. 

Ryan


On 2/22/2013 6:54 AM, AMEAUME, ALAIN (ALAIN)** CTR ** wrote:

Hi users,

I'm interesting to know how to insert my PC laptop with wireshark as a" PC sniffer" between 2 terminals to capture ftp flows between them:

terminal "A" in sub-network x.y.A.1
terminal "B" in sub-network x.y.B.1
my PC laptop "C" on sub-network x.y.A.2 or x.y.B.2

using this configuration, I do not need to install wireshark on A & B !

I suppose that on "A" terminal I need to create a route from A.1 to B.1 passing thru "C", the same relatively to "B", then I will need also to declare on my laptop "C" a kind of "gateway" function to re-route the ftp flow, after capture, to its original destination
  Is it what we call the NAT function on "C": and how to do it on the "C" laptop windows xp sp3 ?

Thanks for your help.

Alain
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
              mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe