This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

monitoring the WAN port of a router

0

I have the following setup: a router connected to a few wireless and wired computer a hub:

  • connected to the modem on port1
  • connected to the WAN port of the router on port2
  • connected to a PC running wireshark on port3.

I was expecting to see the traffic of my internet connection on the PC running wireshark, but instead all I see is a bunch of DHCP protocol packets... is my setup wrong?

asked 05 Mar '12, 10:21

gamba's gravatar image

gamba
6335
accept rate: 0%

edited 05 Mar '12, 10:23


One Answer:

2

A couple of possibilities come to mind:

First, make sure you're capturing in promiscuous mode. That setting is found in the Capture Options dialog.

Second, your "hub" might really be a switch. Some devices marketed as hubs are really switches. If you have a switch, find out if your switch does port mirroring, and if so, mirror either port 1 or port 2 to port 3. If your switch does not do port mirroring, replace it with one that does.

answered 05 Mar '12, 10:45

Jim%20Aragon's gravatar image

Jim Aragon
7.2k733118
accept rate: 24%

thank you. turns out the device marked as "hub" wa not a hub after all.

(06 Mar '12, 05:51) gamba