llkagrand.blogg.se - Wireshark capture filter domain query

Sniff the wireless traffic using a wireless card in monitor mode.ĭavid's answer points out some of the ways you could look for the domain name.Configure all devices to use a proxy perform logging/packet capture on the proxy.

Force other devices to send their traffic through another computer that performs the capture, perhaps using ARP spoofing.

Run the packet capture from the gateway router so that all traffic to and from the network will be captured.

In order to monitor the entire network, you have a few options: This is either due to how switched networks work, or the way wireless cards work in managed mode. If you are running Wireshark on your computer, you will typically only see traffic addressed to your network interface (unicast, multicast, or broadcast), unless you are somehow using a hub instead of a switch.

Your question doesn't specify where on the network you are capturing packets or what type of network, but I am going to assume from a regular computer on the network.