I am testing my home network. I setup Wireshark in host1 with promiscuous mode, and I'd like to see the traffic in host2 and host3 where they are in the same network as host1. However, I am unable to see anything from host2 and host3. What did I do wrong? This happens in both wired and wifi network.
Please advise. Thanks!!
If you are connected to a switch, the only traffic that is sent to your laptop is broadcast and laptop's MAC address. A switch is different from a hub, it only forwards traffic to all ports when it doesn't have entry for the destination MAC in its table. The traffic between hosts 2 and 3 can be captured in a few ways: mirror/span port, TAP on either host 2 or 3, or a hub.
There are two "standard" wiki pages for these type of questions that the OP should be referred to:
Asked: 2021-10-07 03:29:21 +0000
Seen: 336 times
Last updated: Oct 07 '21
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
