Ask Your Question

How to display a port from an ip?

asked 2017-12-03 07:23:14 +0000

CompanyHelper gravatar image

How do I get the ips fetched to display the port number?

edit retag flag offensive close merge delete


Your question is unclear, please elaborate. Do you have in mind a switch port or a protocol port?

sindy gravatar imagesindy ( 2017-12-04 10:00:32 +0000 )edit

When I discover an IP on my network, how do I find the port of that IP? So basically how can I get wireshark to attach the port to the Ip.

CompanyHelper gravatar imageCompanyHelper ( 2017-12-04 20:46:34 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted

answered 2017-12-05 09:20:55 +0000

sindy gravatar image

updated 2017-12-05 19:10:53 +0000

Once again, do you mean the physical port of a switch or router to which an equipment with this IP is connected, or do you mean something else? Many higher layer protocols atop IP (like UDP, TCP, SCTP) use a sub-address called "port", but if you are interested in this kind of port, the question is a bit upside down as 65535 ports are available at each IP address.

The information about the particular interface of the capturing machine on which a particular packet has been captured is available in the Frame part of the packet dissection. The information about physical port of any external device through which the packet has travelled is not recorded into the packet in any way, so Wireshark can not display it to you.

So if you need to identify the physical port of some switch through which the device with a given IP address is connected, you need to find the mapping between IP address and MAC address, which Wireshark can help you with as all packets coming from that IP will have a MAC address of the device from which they got to your LAN, which is either the device itself or a router if the device is not directly connected to your LAN. Then, you need to connect to management interface of your switch and let it show you through which of its ports it can see that MAC address.

If your switch has no management interface, you're out of luck and you'll have to disconnect cables one by one while pinging the IP.

edit flag offensive delete link more


Could Wireshark poll a network switch to identify devices connected to the particular port with either IP address or MAC address? gravatar image[email protected] ( 2018-08-08 13:22:24 +0000 )edit

Wireshark is a passive listener, so it cannot actively poll anything.

sindy gravatar imagesindy ( 2018-08-11 19:11:42 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2017-12-03 07:23:14 +0000

Seen: 3,016 times

Last updated: Dec 05 '17