1
My setup is a computer with wireshark connected to switch on LAN network. The subnet IP that the wireshark is on is .0.# . I would like to capture traffic between subnet IP of .0.# and .2.#. However when I include the filter:
tcp and ip.addr==192.###.2.# && ip.addr==192.###.0.# (with # being numbers), I do not see traffic between those two IP's ? I have ping both IP FINE!
So is this possible and by click Edit Filter and putting in the above am I setting the filter correct?
Links or Tutorials would be great!
2Be aware: You can't watch traffic on a switch unless it's coming or going to/from the computer with Wireshark installed. That is, unless your switch supports configuring a monitoring port. – Ƭᴇcʜιᴇ007 – 2013-09-25T20:56:51.093