1

I'm using wireshark to listen to packets on my own personal home network. I have my Desktop with Debian and Windows 7 running and my laptop is running the same setup; Debian and Windows 7.

I installed wireshark on both.

When on my laptop, I can listen to packets on wlan0. When I browse the web, the packets are captured and all is good.

When on my desktop, I can listen to packets on eth0. When I browse the web and etc, the packets are captured and all is good.

However, when on my laptop (wlan0) and want to listen to packets coming in/out on eth0 - which my desktop computer is on, I obviously get no results.

To the Question:

If I want to use my laptop and monitor the packets coming in and out from my desktop or just simply on both wlan0 and eth0, how could I do this?

This is what it all looks like. As you can see, there is no IP address at eth0. (This is from my laptop, where wlan0 has an IP address).

enter image description here

and here is another perspective

enter image description here

I know it's a small image but if you look closely, under eth0 there is no ip address.. but just below that, wlan0, has a bunch of information there and an ip address.

  • Use SSH to log in to the desktop and run a second wireshark instance there? – Hauke Laging May 4 '14 at 3:07
  • Can you show us what you're getting? It's not really clear how you're running wireshark. Ae you using tshark and telling it to listen on these interfaces (eth0, wlan0)? – slm May 4 '14 at 3:13
  • How are the machines connected ? "eth0 - which my desktop computer is on" Sorry if I misunderstood, but on your laptop, eth0 is your laptop's ethernet card. Is your desktop really connected to your laptop's ethernet card ? It looks disconnected. – Leiaz May 4 '14 at 10:02
  • I'm sorry if I'm explaining it terribly. My Desktop is connected via an ethernet cable. So when I ifconfig it shows that I am using eth0. For my laptop, it's connected wireless and when I ifconfig it shows that my packets are received/sent on wlan0. – Space Ghost May 4 '14 at 10:17
  • 2
    And both are connected to a home router ? Not to each other ? So it's perfectly normal that you don't see any packet (or ip address) on the laptop's eth0, it is disconnected. To see the traffic for both machines you'd have to be on the router. (eth0 on the desktop is the desktop's network card, but on the laptop it is the laptop's (wired) network card, there are no packets to capture) (also use @name to notify the user of your answer in comments) – Leiaz May 4 '14 at 11:11
0

I am having trouble understanding what the specific problem is. However if the most important thing is just make it capture (ie work) packets use the any interface. Wireshark will then capture traffic on eth0/wlan0/lo.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.