unable to capture traffic on the same home network

retag add tags

I am testing my home network. I setup Wireshark in host1 with promiscuous mode, and I'd like to see the traffic in host2 and host3 where they are in the same network as host1. However, I am unable to see anything from host2 and host3. What did I do wrong? This happens in both wired and wifi network.

Please advise. Thanks!!

If you are connected to a switch, the only traffic that is sent to your laptop is broadcast and laptop's MAC address. A switch is different from a hub, it only forwards traffic to all ports when it doesn't have entry for the destination MAC in its table. The traffic between hosts 2 and 3 can be captured in a few ways: mirror/span port, TAP on either host 2 or 3, or a hub.

BigFatCat

answered 2021-10-07 07:42:28 +0000, updated 2021-10-07 07:48:48 +0000

edit flag offensive 0 remove flag delete link

Comments

There are two "standard" wiki pages for these type of questions that the OP should be referred to:

Ethernet Capture Setup, particularly the section on switched networks.
WLAN Capture.

grahamb (2021-10-07 08:15:18 +0000) edit

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

unable to capture traffic on the same home network edit

Comments

1 Answer

Comments