Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: [Ethereal-users] Capturing on a switched LAN - problem with understanding.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Peter Marquardt <info@xxxxxxxxxxxx>
Date: Thu, 27 May 2004 21:08:41 +0200
Hello to all cracks.

The following diagram shows the network which I want to analyze


   .       .
    \---.   \----.
    |PC4|   |PDA1|
    `---'   `----'
                                  R1: 192.168.0.1
                                  R2: 192.168.0.2

            .    .               PC1: 192.168.0.120
    ,---.    \--/    ,---.       PC2: 192.168.0.110
    |PC3|---( R2 )---|PC2|       PC3: 192.168.0.151
    `---'    `--'    `---'       PC4: 192.168.0.180
              |                 PDA1: 192.168.0.108
              |
              |
            ,--.
           ( R1 )
           /`--'\
          /      \              R1: LAN
         /        \---.             DHCP running
        /         |PC1|             WAN -> DSL Modem
 .     /  ,       `---'
 )\------/(                     R2: LAN & wireless AP
< Internet >                        WAN -> unused
 )/------\(
 '        `

The Machine to capture traffic with Ethereal in promiscuous mode is one of the PCs connected to R2, unfortunately R2 has no option to repeat the traffic from the R1-side. However I have the possibility to specify a static route in R2. Now, I tried to look up on the internet what exactly a static route means but most documents were on how to set one up in cisco routers. I didn't understand the ones which tried to explain it, probably because english is not my mother tongue.

What I want to know: Is it possible with that setup to have PC2, 3 or 4 capture all the traffic, including the traffic originating from PC1 and R1?

Sorry for this quite off-topic question, I know of no better place to ask.

Kind Regards
--Peter Marquardt, dignition media