How to capture packets for wireshark

Поділитися
Вставка
  • Опубліковано 15 вер 2024

КОМЕНТАРІ • 12

  • @keepevolving7968
    @keepevolving7968 7 років тому

    Terrell I have customers with managed switches that have a trunk port with multiple vlans going into their switch. Will the hub allow wireshark to sniff traffic on ports that have 2 or more vlans? 1 tagged and 1,2 or 3 untagged/802.1q

  • @Can2We
    @Can2We 7 років тому

    does this work to capture wireless traffic as well or only for wired connections ?
    So if I connect a hub to my home router (which is a switch and a router and wireless access point all together ), would I be able to capture wireless traffic going on my network from all devices connected to my network wirelessly ?

  • @AaliMr007
    @AaliMr007 9 років тому

    Okay! i am agreed with you but in the end you have to connect with their network for capturing packets? :)

  • @SarcasmSage-w6o
    @SarcasmSage-w6o 8 років тому

    You could always use a PoE injector to power the device for testing purposes. Easier to carry than a PoE switch.

    • @TerrellBoyer
      @TerrellBoyer  8 років тому

      Very true. I just used what I had available to me at the time.

  • @skerzman
    @skerzman 10 років тому

    If you have 1 Virual IVR, Mitel MBG and Mitel 3300. Can see the DTMF tones being sent to the IVR from the MBG. Is it possible to mirror the 1 VIrual device or would I have to mirror the server port? Or is it possible to run wireshark on the server and see the traffic.

    • @TerrellBoyer
      @TerrellBoyer  10 років тому

      I would think that if you are trying to capture the packets that are going to and from the server, the best location would be on the server. The IVR software may already be doing this for you and archiving to a log folder. I am not familiar with Mitel, so I am guessing based on other systems in the industry. Hope this helps. Let me know what you find out.

  • @AaliMr007
    @AaliMr007 9 років тому

    hmmm question! why did you place a hub it is old now and not used anymore?
    why don't you connect directly POE switch to Coperate network instead of connecting HUB and then HUB connecting to Corp-Network Switch?

    • @TerrellBoyer
      @TerrellBoyer  9 років тому +3

      The old technology in the hub is what allows you to have visibility of the packets. A switch only gives you visibility of packets to and from your computer or broadcast traffic. The older technology in a hub offered every packet to every port. It is not as efficient as a switch, but still very useful for trouble shooting.
      If you use a switch, it has to have a programmable feature called port mirrioring. Not all switches have that feature. Also, you may be dependent on the customer's it department to alow you access. If you bring your own, you can just splice it in.
      Hope this helps.

  • @AaliMr007
    @AaliMr007 9 років тому

    okay give me some solution, My client has Vlan for Voice and that switch has feature for Port mirroring just tell me the simple steps for capturing.

    • @TerrellBoyer
      @TerrellBoyer  9 років тому +1

      Depends on the switch. Set the ports you want to monitor and the port your laptop is plugged into. Most of the time you can Google the switch model and port mirror to find step by step directions.