"p-0''0-h the cat (ES)" wrote in
news:k7j75apismgkvsshouf2n1b90m1ispjok6@4ax.com:
> On Fri, 31 Oct 2014 16:48:29 +0000 (UTC), Dustin
> wrote:
>
>>You're confused. Have you actually tried using wireshark on a LAN?
>>The only way you can 'spy' on other computers on the LAN's traffic
>>is if their using a hub. If they're tied into a switch, you don't
>>have access to see the other comms. You'll only see what's
>>coming/going from the machine your running wireshark on.
>
> Complete bollocks. Ignore.
Nope..The only exception is wireless traffic OR an enterprise level
switch that's been configured to let users do stupid things with it:
ie, repeat mode, packet sniffing LAN enabled, etc. Otherwise if it's
a switch and not a hub, you will not see the traffic on the computers
using ports 1,2,3, or 4 hardlined into it. H0h0h0.
http://preview.tinyurl.com/oarxg58
I read through the wireless capture and the other hub/switch/tap
capturing, but I'm very confused.
What I want to do is capture all of the info from my wifi router from
how ever many users are using it at that time. The router is sitting
next to my laptop, so I have access to it. What do I have to buy?
I feel like simple is better and that there should be something I can
connect to the router and connect that to my computer that will do
the job. Any help is appreciated.
Having access to the router is a start. However it is a low-end home-
user router it is unlikely to have what is needed built-in - 99.9% of
home users won't know how to use wireshark. If is more of an
enterprise grade router it might have a packet capture function or
port-mirroring function - check the manual.
Another option, is if your router can be changed to run a more open
and flexible software stack like OpenWRT then you can do packet
captures onboard with tcpdump.
If your router connects to Internet (or the rest of the network) via
Ethernet then you can install a hub or cheap port-mirroring capable
switch to copy that traffic to another port for Wireshark monitoring.
For instance an HP ProCurve 1810G can do this. You might also find an
old Ethernet hub (not switch) that will repeat traffic out of all
ports to the same end.
See that paragraph? (not switch). If you want to monitor ALL of the
LANS activity, you must be tied into a hub; a nice dumb switch that
repeats everybodies traffic on all of it's ports, no privacy, no
dedication there. Switches don't do that repeating (generally
speaking, you can get expensive ones that will, but it's not by
default) So you won't be spying on port1,2,3 if your wired to port 4.
If it's a hub oth, you can!
Ignore pooh; he writes from his anus. He's being intentionally vague
in his complete bollocks reply. The above information is how you spy
on LANs.
--
If you can read this, Thank a teacher.
If you're reading it in english, Thank a soldier!
--- NewsGate v1.0 gamma 2
* Origin: News Gate @ Net396 -Huntsville, AL - USA (1:396/4)
|