First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

can i use wireshark to know the data sent between a computer and a printer?

  • retag add tags

as the title says

Joseaaa's avatar
1
Joseaaa
asked 2024-01-17 23:42:25 +0000
Guy Harris's avatar
19.9k
Guy Harris
updated 2024-01-18 20:50:59 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

If the computer is communicating with the printer over a network, such as a local-area network (Ethernet, Wi-FI) or (less likely, but not impossible) over a wide-area network such as the Internet, then, if you run Wireshark on the computer, it should be able to capture the network traffic to the printer.

That traffic might be encrypted, in which case you would need to be able to decrypt the traffic in order to see the data being sent between the computer and the printer. Wireshark can decrypt some traffic, but would need additional information in order to decrypt it.

If the printer is locally attached over USB, then, if Wireshark can capture raw USB traffic (which it can on some operating systems, with varying levels of difficulty), it may be able to show you the traffic between the computer and the printer.

Guy Harris's avatar
19.9k
Guy Harris
answered 2024-01-18 06:21:41 +0000
edit flag offensive 0 remove flag delete link

Comments

While you can sniff USB traffic with an extension it has a number of drawbacks that make it clear you should not use this on most computers.

hugo.vanderkooij's avatar hugo.vanderkooij (2024-01-18 10:10:53 +0000) edit

But if the usb is plugged from computer to printer, I need to have wireshark inside the computer right? I cant get info with another computer

Joseaaa's avatar Joseaaa (2024-01-18 17:13:59 +0000) edit

While you can sniff USB traffic with an extension

An extension is required only oil Windows. and the Wireshark installer allows the USBPcap extcap to be installed.

On those UN*Xes that support USB traffic capture - Linux, macOS, FreeBSD - support is built into the OS. It may have to be configured on in Linux (a kernel extension might have to be loaded), and newer versions of macOS apparently require that you turn off System Integrity Protection to use it, but it's not an extension.

t has a number of drawbacks that make it clear you should not use this on most computers.

What are those drawbacks?

Guy Harris's avatar Guy Harris (2024-01-18 20:24:27 +0000) edit

But if the usb is plugged from computer to printer, I need to have wireshark inside the computer right?

Right.

I cant get info with another computer

No, you can't. There might be hardware that you could connect the computer and printer to - think of it as like an Ethernet tap, but for USB - that might be able to capture the raw USB traffic.

Guy Harris's avatar Guy Harris (2024-01-18 20:26:09 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer