Intro to Wireshark Tutorial // Lesson 4 // Where do we capture network traffic? How?

Where do we capture network traffic and how? In this lesson we will look into where we should place Wireshark to get the best vantage point in our packet captures. Client side? Server side? or both?

Please smash the like button to let me know if you think this is good content!

== More On-Demand Training from Chris ==

== Live Wireshark Training ==

== Private Wireshark Training ==

Chapters in video:
0:00 Intro
1:10 Where to place Wireshark
2:46 Capturing with Taps
3:46 Capturing with SPAN ports
4:18 Capturing on the client machine
5:16 Capturing server side

[dopy]

Where can we get a t-shirt like that ?

[ChrisGreer]

Where do we capture network traffic and how? In this lesson we will look into where we should place Wireshark to get the best vantage point in our packet captures. Client side? Server side? or both?

Please smash the like button to let me know if you think this is good content!

Want some live, hands-on training with Wireshark? Join me on zoom:
WIRESHARK TRAINING

[binbin]

I'm a newbie, your videos help me so much. Thanks for all.

[cansizege]

Thanks for valuable information, looking forward to next lesson

[NETWizzJbirk]

May I also point out that many modern network devices can do embedded packet captures. You basically filter on direction, interface, and what you would like to match for example, with an access list. it adds a buffer of capture packets, which you can view a summary or export to a PCAP.

[bilalbashir]

Hey Chris can you make a video for wireless clients
I’m tshooting issue of mobile forklifts loosing wireless connection with meraki access points

[aleksandarstoev]

Man I need a private lessons of that man there!

[patrickmooiman]

Perfect explanation. Easy to understand 😀

[BruceFerrell]

What I've been trying to figure out is how to use the remote capture feature!

[ashleykitson]

What are TAPs and SPAN ports. Kinda followed you about placement of capture until those two terms came up.

[baqri]

Nice explanation. I have a question in my case the wireshark is only capturing my local machine. For other machines, it hardly captures the MDNS packets. Please help me out?

[draconxx]

By network analyzer, are you referring to a physical tool ?

[henrytraining]

Is Wireshark capable of capturing 10gig interfaces? Im able to capture on the switchport connecting to the server but its 10g and the capture is blank when i open it (also for 10g AP switch interfaces)? Also, Im hoping in a future lesson to see you dissect CAPWAP tunnel data, seems to be alot more in these packets that go to APs interfaces. Thanks!

[mailmikew]

Chris - Great to see you online, fantastic information, I will be watching your other videos soon. It has been a long time since I used wireshark. Are going to cover other interfaces besides ethernet?

[FarmerAstronaut]

Lesson #4 and I still don't understand how to start capturing the traffic. Freshly installed wireshark as a portable. 6 interfaces that definitely not what I need. I just need to capture tcp traffic. And I can't figure out how to do this. But instead, I already set up a policy for files and other not important stuff for me. Could you please explain in you videos what are those interfaces I see (in the menu Capture Options) and how to find the right interface to capture my wi-fi traffic?

[vyasG]

Thank you for this Video. Do you have any video, demonstrating the use of taps? Also, is there any model of tap you would recommend for gigabit ethernet home network(not too expensive) ?

[jfiffick]

What brand of physical tap do you recommend?

[tibtrader]

How do you typically capture the server side when its a VMware environment or cloud in a production environment? Do packet brokers help in a data center? Thanks!

[Meenimie]

I am 18, I am following each and every code. It's working. But I have no idea what I am doing.

[gateteerics]

How do I make my pc a server using wireshark