[ale] Wireshark newbie-Q: Promiscous capture

Chris Fowler cfowler at outpostsentinel.com
Tue Apr 28 19:08:25 EDT 2009


On Tue, 28 Apr 2009 18:10:17 -0400
Robert Coggins <ale at cogginsnet.com> wrote:

> If you are on a switch you may not be able to capture the packets for
> other IPs.  You need a hub.  Unless I am missing something else
> here...
> 

Correct.  If you want to do this on a switch then you need a switch
that will mirror ports for the purpose of sniffing.  Cisco is one such
example.


More information about the Ale mailing list