I have the following setup: a router connected to a few wireless and wired computer a hub:
I was expecting to see the traffic of my internet connection on the PC running wireshark, but instead all I see is a bunch of DHCP protocol packets... is my setup wrong?
A couple of possibilities come to mind:
First, make sure you're capturing in promiscuous mode. That setting is found in the Capture Options dialog.
Second, your "hub" might really be a switch. Some devices marketed as hubs are really switches. If you have a switch, find out if your switch does port mirroring, and if so, mirror either port 1 or port 2 to port 3. If your switch does not do port mirroring, replace it with one that does.
answered 05 Mar '12, 10:45