unable to capture traffic on the same home network

asked 2021-10-07 03:29:21 +0000

erik9801
1 ●1 ●1

I am testing my home network. I setup Wireshark in host1 with promiscuous mode, and I'd like to see the traffic in host2 and host3 where they are in the same network as host1. However, I am unable to see anything from host2 and host3. What did I do wrong? This happens in both wired and wifi network.

Please advise. Thanks!!

answered 2021-10-07 07:42:28 +0000

BigFatCat
31 ●3 ●90 ●5

updated 2021-10-07 07:48:48 +0000

If you are connected to a switch, the only traffic that is sent to your laptop is broadcast and laptop's MAC address. A switch is different from a hub, it only forwards traffic to all ports when it doesn't have entry for the destination MAC in its table. The traffic between hosts 2 and 3 can be captured in a few ways: mirror/span port, TAP on either host 2 or 3, or a hub.

edit flag offensive delete link

Comments

There are two "standard" wiki pages for these type of questions that the OP should be referred to:

Ethernet Capture Setup, particularly the section on switched networks.
WLAN Capture.

grahamb ( 2021-10-07 08:15:18 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

unable to capture traffic on the same home network

1 Answer

Comments

Your Answer

Question Tools

Stats

unable to capture traffic on the same home network edit

1 Answer

Comments

Your Answer

Question Tools

Stats

unable to capture traffic on the same home network