How should I set up a new PC for Wireshark?

We are replacing Distributed Sniffers with PC's running Wireshark. I'm used to a 2 NIC scenerio- one to do the monitoring and one for communications. As we will be running these boxes remotely, are 2 NIC's needed/reccomended/not needed?

Thanks.

remote-monitoring sniffer config

asked 06 Aug '12, 06:25

SteveBrady
6●1●1●2
accept rate: 0%

One Answer:

oldest newest most voted

I would say recommended. Makes life easier:

you don't need to remember to filter out your own traffic
you can sniff passively (Windows: remove all services/protocols from the sniffer interface)
you can reach it even if the sniffer port connected network is down (if separated networks)

link

answered 06 Aug '12, 07:12

Jaap ♦
6.0k●5●68
accept rate: 11%

Your answer

toggle preview

community wiki

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

*italic* or _italic_
**bold** or __bold__
link:[text](http://url.com/ "Title")
image?![alt text](/path/img.jpg "Title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

learn more about Markdown

Tags:

sniffer ×12
remote-monitoring ×5
config ×2

Asked: 06 Aug '12, 06:25

Seen: 433 times

Last updated: 06 Aug '12, 07:12

How should I set up a new PC for Wireshark?

Follow this question

You have a trillion packets.

You need to see four of them.

Don't have Wireshark?

Related questions