Using Wireshark,how do I view network traffic, like web pages that other computers on the network are viewing?

I think it has something to do with using windump in collaboration with wireshark
I understand how to follow TCP stream, but why am i only seeing my traffic and not other computers on the network’s http traffic?

Share this information...
  • Print this article!
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • E-mail this story to a friend!
  • FriendFeed
  • MSN Reporter
  • MySpace
  • StumbleUpon
  • Twitter
  • Yahoo! Bookmarks

One Response to “Using Wireshark,how do I view network traffic, like web pages that other computers on the network are viewing?”

  • Mike D says:

    You’ll be able to view a "conversation" between two IP addresses by using the Analyze > Follow TCP Stream option once you have captured a sufficient amount of HTTP traffic.

    It will not render a full HTTP web page, but you’ll be able to see the text contents of the page (no images). This will only work for HTTP (port 80), and not SSL (HTTPS, port 443) browsing sessions as they are encrypted.

    Hope this helps.

    -Mike D
    Certified network engineer w/ 16 years experience

Leave a Reply

Security Code:

Free Consultation: 086 8518337

LET US HELP YOU TO WWWIN…
Categories