Ask Your Question
0

Quisiera saber si con wireshark puedo capturar los paquetes de toda una red. [I would like to know if I can capture packets from an entire network with Wireshark.]

asked 2024-10-02 21:50:24 +0000

Cyborg009 gravatar image

updated 2024-10-02 23:13:26 +0000

Guy Harris gravatar image

Lo que sucede que la hacer el analisis solo puedo ver los paquetes capturados solo los de mi IP.

¿Favor me pueden ayudar?

[What happens is that when I do the analysis I can only see the captured packets, only those from my IP.

Can you please help me?]

edit retag flag offensive close merge delete

1 Answer

Sort by » oldest newest most voted
0

answered 2024-10-02 23:12:02 +0000

Guy Harris gravatar image

Not everyone who reads this site understands Spanish, so I've translated your question with Google Translate. I've also moved the second sentence of the question from the subject to the text of the question.

If this is an Ethernet network, you will have to capture in promiscuous mode and, if it's a switched network, you will have to capture on a "mirrored port". See the Wireshark Wiki article on Ethernet captures for details (it's in English).

If this is a Wi-Fi network, you will have to capture in "monitor mode". That may force your machine to disassociate from the Wi-Fi network, in which case it will not be able to send or receive packets on that network; you may have to use another machine to do the monitor mode capture. If the network is "protected", which it probably is, that means that the traffic on the network is encrypted; you will need the password for the network, and will need to provide it to Wireshark so that it can decrypt the traffic. See the Wireshark Wiki article on Wi-Fi captures for more details (it's also in English).

If it is another type of network, please tell us what type of network it is.

[No todos los que leen este sitio entienden español, por eso he traducido tu pregunta con Google Translate. También he movido la segunda oración de la pregunta del tema al texto de la misma.

Si se trata de una red Ethernet, deberá realizar la captura en modo promiscuo y, si se trata de una red conmutada, deberá realizar la captura en un "puerto reflejado". Consulte el artículo de Wireshark Wiki sobre capturas Ethernet para obtener más detalles (el enlace aquí lleva a una traducción de Google de la página).

Si se trata de una red Wi-Fi, tendrás que realizar la captura en "modo monitor". Esto puede obligar a tu máquina a desasociarse de la red Wi-Fi, en cuyo caso no podrá enviar ni recibir paquetes en esa red; es posible que tengas que utilizar otra máquina para realizar la captura en modo monitor. Si la red está "protegida", que probablemente lo esté, eso significa que el tráfico en la red está cifrado; necesitarás la contraseña de la red y deberás proporcionársela a Wireshark para que pueda descifrar el tráfico. Consulta el artículo de Wireshark Wiki sobre capturas Wi-Fi para obtener más detalles (el enlace aquí lleva a una traducción de Google de la página.

Si es otro tipo de red, por favor indíquenos qué tipo de red es.]

edit flag offensive delete link more

Comments

Thank you very much for the information and help, review the information, I appreciate your support

Cyborg009 gravatar imageCyborg009 ( 2024-10-03 02:42:43 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2024-10-02 21:50:24 +0000

Seen: 199 times

Last updated: Oct 02