Wireshark Setup

Unanswered Question
Joe Clarke Fri, 08/20/2010 - 22:12
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    Founding Member

I use it all the time.  It's very easy to use.  Just plug your wireshark host into the destination SPAN port and go to Capture > Start.  That will start capturing all ports spanned from the source.  If you want to do filtering of these packets as the capture is running, go to Capture > Options and define a capture filter.  For example, to filter on all HTTP traffic, use the filter "tcp port 80".


This Discussion