Network Engineering Stack Exchange is a question and answer site for network engineers. It only takes a minute to sign up.
Sign up to join this community
I am new to networking and now learning wireshark now and unable to capture comms between 2 devices. This is my setup.
When I connect to "Ethernet" (Ethernet is the Ethernet port at my PC) at Wireshark, then i can see comms between PC and Dev1 or PC and Dev2. But how do I see comms between Dev1 and Dev2?
With a simple, unmanaged switch tapping into the conversation of two other devices isn't possible.
You either need to capture directly on one of the devices or, when that isn't possible, you need a managed switch with port monitoring, port mirroring, or SPAN capability. On such a switch, you'd set the monitor port to the one your Wireshark PC is connected to, and mirror the traffic from one of the other ports.
Depending on the switch, the monitor port may become transmit only/dedicated for capturing, so the Wireshark PC effectively becomes detached from the network. You may need a dedicated NIC to work around that.
You need to enable the SPAN port feature on the switch if the feature is available. Otherwise the conversations between Dev1 and Dev2 shouldn't be visible to the wireshark PC.
