Wireshark · Ethereal-users: Re: [Ethereal-users] Using Etheral to pin-point a network throughput problem

[Ulf Lamping <ulf.lamping@xxxxxx>]

Scott Lowrey wrote:

>
> god like wrote: 
>
>> - Does ethereal handle switched networks and if so do I have to set
>> anything special up.
>
> Ethereal can see whatever the host it's running on sees.  Switches
> generally learn which hosts are on which ports and forward packets
> accordingly, so you might not be able to see what you want to see.
>
> Therefore, if you want to sniff the entire network, you'll need access
> to the switches and/or routers so that they can be configured to send
> all traffic to a special port.  If it's not a managed switch (i.e.,
> one that has a management interface and features like port mirroring),
> then you'll have to be content with monitoring a link that's "close to
> the problem" in order to figure out what's going on.  Old-fashioned
> hubs might work for this but beware: most new "hubs" are really
> switches -- very frustrating.  
>
You may have a look at: http://wiki.ethereal.com/CaptureSetup_2fEthernet

Regards, ULFL