I'm new to wireshark

initramfs · 09-02-2014, 01:05 AM

Hi

I have two questions on wireshark. Why does wireshark warns us not to use it as root? I thought you had to be root to use this program.

Second, is packet capturing only from my PC to the internet. Is it possible to capture packets from all computers on the local network?

Thanks

ferrari · 09-02-2014, 05:04 AM

Quote:

Why does wireshark warns us not to use it as root? I thought you had to be root to use this program.

It has security implications. There are a few methods that allow you to run it as regular user, including the use of dumpcap (to capture traffic as root) and observe with wireshark. This should help make things clearer for you

http://wiki.wireshark.org/CaptureSet...turePrivileges

Quote:

Second, is packet capturing only from my PC to the internet. Is it possible to capture packets from all computers on the local network?

Make sure you're capturing in promiscuous mode.

Depending on your network architecture, it may not be possible to monitor all traffic (eg unicast) on the network as easily as one might first think

http://www.networkworld.com/article/...uous-mode.html

initramfs · 09-02-2014, 01:15 PM

I heard of packet sniffing or packet analysis but I never had any interest in them before. Anyway, it is an interesting and useful tool.

I will also check out some youtube videos as there are some tutorials on wireshark

I appreciate the links and reply.

Thanks ferrari