 | 1 | initial version |
Indeed you can configure the switch to forward the traffic to/from the printer port to the monitor port. See also CaptureSetup/Ethernet.
Since that will only capture the printer's traffic a capture filter is not necessary. In fact, applying a filter may filter out the cause of the problem...
Since you want to capture for a long duration, it is better to use dumpcap on the command line instead of using Wireshark GUI as it might crash when it runs out of memory.
