I have the following setup: a router connected to a few wireless and wired computer a hub:

  • connected to the modem on port1
  • connected to the WAN port of the router on port2
  • connected to a PC running wireshark on port3.

I was expecting to see the traffic of my internet connection on the PC running wireshark, but instead all I see is a bunch of DHCP protocol packets... is my setup wrong?

asked 05 Mar '12, 10:21

gamba's gravatar image

gamba
6335
accept rate: 0%

edited 05 Mar '12, 10:23


A couple of possibilities come to mind:

First, make sure you're capturing in promiscuous mode. That setting is found in the Capture Options dialog.

Second, your "hub" might really be a switch. Some devices marketed as hubs are really switches. If you have a switch, find out if your switch does port mirroring, and if so, mirror either port 1 or port 2 to port 3. If your switch does not do port mirroring, replace it with one that does.

link

answered 05 Mar '12, 10:45

Jim%20Aragon's gravatar image

Jim Aragon
4.0k72976
accept rate: 17%

thank you. turns out the device marked as "hub" wa not a hub after all.

(06 Mar '12, 05:51) gamba
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×30
×19

Asked: 05 Mar '12, 10:21

Seen: 2,748 times

Last updated: 06 Mar '12, 05:51

powered by OSQA