first of all you need to mirror traffic o the PC NIC using some form on SPAN on a LAN switch.
then on wireshark after the capture you can select one frame of the TCP session and you can use the option called follow TCP stream it will open a child window trying to rebuild the TCP session
Hope to help
Giuseppe
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
