USB Capture Of Ethernet Traffic Using Sharktap
I'm new to wireshark and sharktap so please forgive if this is a silly question or has been previously answered. I'm trying to capture Ethernet data between a HMI screen and a PLC using a Sharktap USB but have to send the data through a usb converter as my computer doesn't have an Ethernet port. The IP addresses of the HMI and PLC aren't showing up but rather I'm getting new IP addresses assigned by the host. Is there any way to see the original IP addresses so that I can more easily analyze the traffic? Thanks in advance for any help.
Is your setup like this:
Where does the Laptop USB to Ethernet adaptor fit in?
The PLC is connected via a switch but otherwise yes. I also tried using the Ethernet tap on the Sharktap to run to a Ethernet to USB adapter and then to the laptop. Both methods yielded the same result.
UPDATE*
A coworker with a different laptop was able to capture the traffic as intended with the proper IP addresses. When he plugs the Sharktap into his laptop, "Ethernet" channel appears in the Wireshark main window. So now it's a question of does his computer have a plugin or driver that mine doesn't or did I miss an option on install?
According to http://www.midbittech.com/usb/USB%20S..., you may need to restart the capture driver. Also, which capture driver do you have installed (WinPcap or Npcap) vs. which one is installed on the laptop that works? If it's npcap, then you might need to "net stop npcap", "net start npcap" instead of "net stop npf", "net start npf". Alternatively, if the drivers differ between machines, you could try to uninstall the one that doesn't work and install the one that does?
I was using USBPcap. Wireshark also has "Npcap loopback adapter" but it never showed anything during capture. I will determine the difference between laptops and see where to go from there.