Wireshark · Ethereal-users: Re: [Ethereal-users] lan configuration for ethereal

[Ulf Lamping <ulf.lamping@xxxxxx>]

B MCC wrote:

>A small office is currently setup with a cisco 1601
>router that connects to a Dlink dds-24 switch that
>ties into a second Dlink dds-24 switch.
>
>What is the easiest way for me to change this
>configuration so that I can have a port to view all
>traffic on the network ? We are running short on ports
>so  I'll need to purchase another switch soon and I'd
>like to get some type of hardware that would allow me
>to see all the packets on the network. 
>
>  
>
For general question, see http://wiki.ethereal.com/CaptureSetup

As you have a switched network with multiple switches, you cannot
capture only on one port to see all traffic on your network.

As soon as you have "inter switch" traffic which won't go to the other
switches, you are out of luck.

Regards, ULFL