Wireshark doesn't show all IP addresses are connected to our network.
There is a server in our network, such that, it is connected to a switch. All our systems are connected to that switch. I installed Wireshark in my OS in VMware vSphere Client, such that, it captures all packets are transmitted between my system and the server. In other words, i set up and defined an interface as "Remote Interface" by the way in Wireshark:
Capture>> Options>> Manage Interfaces>> Remote Interfaces
such that, that interface is the mentioned server. But, i need to it captures all packets are transmitted between the server and all other systems in our network so i can monitor them. What should i do? How can i see others' packets?
Is the remote interface the client or server? If it is client remote interface, then the capture will only have traffic to/from client. The server remote interface will capture all traffic to/from server limited by OS and hardware. There is a high probability that packets will be missed during heavy CPU or traffic load. Wireshark reports packets it dropped in the pcap file properties. Other options are mirror ports, TAP, or OS packet capture tools with limitations. Is it required to capture all packets? There is software that can monitor connections and performance without capturing packets.