This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

capture tiers

0

can wireshark identify devices in between? Ex. I want to analyze the traffice from source=machine_A (PC) to destination=machine_B (server), why is it i cannot see the ip addresses of machines (e.g. FW, routers, etc.) in between Machine A & B? Wireshark is installed in source machine_A and initiated the data capture.

asked 29 Apr '15, 20:17

revilo2014's gravatar image

revilo2014
6113
accept rate: 0%

edited 29 Apr '15, 20:19


One Answer:

1

You can only see the MAC address of the next hop device.

You can also identify how many layer 3 devices are in between by looking at the TTL.

To understand why you can't see the IPs of the devices that are in between, please search on youtube for "network fundamentals".

answered 30 Apr '15, 02:36

Roland's gravatar image

Roland
7642415
accept rate: 13%

edited 30 Apr '15, 02:37