Giuseppe Larosa Fri, 06/19/2009 - 11:59
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    Founding Member

Hello Pedro,

first of all you need to mirror traffic o the PC NIC using some form on SPAN on a LAN switch.

then on wireshark after the capture you can select one frame of the TCP session and you can use the option called follow TCP stream it will open a child window trying to rebuild the TCP session

Hope to help



This Discussion