How to find the make and model of a local router? [closed]
Hello, I have a pcap file with about 1500 packets that I am using to figure out the make and model of the router used when my professor captured these packets.
I am completely new to wireshark and only know what a very limited amount of filters do. If anyone has any idea of a filter I could use to find this information it would be greatly appreciated.
Also, if someone does know of which filters to use, could they please provide an explanation? I'm new to this kind of stuff and want to learn as much as I can!
Thanks so much
EDIT: I figured it out. All I had to do was follow the TCP stream for a conversation between the "intruder's" device IP address and the router IP address.
There was a whole scenario for this assignment and I think it would be a waste of time if I explained the whole thing... which is why I'm closing this thread.
Thanks to the people who offered their opinions! They helped me come to the realization that I was being an idiot.
Do you have a plan for how to narrow down the 1500 packets to one that has info on the router?
Look at Statistics->Conversations and Statistics->Endpoints then make a diagram of what you learned about the network.
@losa2,
The convention here is that you accept an answer by clicking the checkmark icon to the left of it and you don't close the question.
@grahamb thanks. good thing it won't let me accept an answer since I don't have enough points. What do you suggest I do?