From the course: Wireshark Essential Training

Unlock the full course today

Join today to access over 23,200 courses taught by industry experts.

Tap into the data stream

Tap into the data stream

- [Instructor] Effective packet analysis begins with tapping into the network at the proper location to gather traffic for analysis. Tapping into the data stream and what you will see will depend on the network. In today's networks, there are two types of ethernet environments, shared or hub-based or on a switch. If you're on a wireless network, you'll go through an access point, which is acting like a hub where we can see all the traffic. If tapping into a wired network, you'll most likely go through a switch, and then you'll see only your own traffic. If you want to see all the traffic, we have choices. We can use port mirroring or SPAN, which is switched port analysis. We can also monitor directly on the device, as a lot of vendors are putting Wireshark right within their device so you can monitor the traffic in real time. You can also use a full-duplex tap in line with traffic, and you'll most likely need a special…

Contents