USB Capture Of Ethernet Traffic Using Sharktap

edit

Is your setup like this:

         Ethernet
HMI ---------------- PLC
             |
             |
         SharkTap
             |
             | USB
             |
           Laptop

Where does the Laptop USB to Ethernet adaptor fit in?

The PLC is connected via a switch but otherwise yes. I also tried using the Ethernet tap on the Sharktap to run to a Ethernet to USB adapter and then to the laptop. Both methods yielded the same result.

UPDATE*

A coworker with a different laptop was able to capture the traffic as intended with the proper IP addresses. When he plugs the Sharktap into his laptop, "Ethernet" channel appears in the Wireshark main window. So now it's a question of does his computer have a plugin or driver that mine doesn't or did I miss an option on install?

According to http://www.midbittech.com/usb/USB%20S..., you may need to restart the capture driver. Also, which capture driver do you have installed (WinPcap or Npcap) vs. which one is installed on the laptop that works? If it's npcap, then you might need to "net stop npcap", "net start npcap" instead of "net stop npf", "net start npf". Alternatively, if the drivers differ between machines, you could try to uninstall the one that doesn't work and install the one that does?

I was using USBPcap. Wireshark also has "Npcap loopback adapter" but it never showed anything during capture. I will determine the difference between laptops and see where to go from there.