Wireshark mailing list archives

need some help


From: Miszcsi Miszcsi <miszcsike () yahoo com>
Date: Fri, 16 Apr 2010 11:35:59 -0700 (PDT)

Hello

I'm trying to monitor network traffic on windows gateway with Wireshark, specially IM traffic, Yahoo Messenger. I have 
2 fastethernet cards in the pc, one for WAN and one for LAN.
If I'm running the sniffer on an internal pc, i have both incoming and outgoing packets from and to yahoo server or in 
case of peertopeer messaging to and from remote discussion partner.
If I'm running the sniffer on the gateway using WAN interface for capture, I have only incoming packets, and no 
outgoing. For filtering @capture I'm using the option 
"tcp port 5050 and host X.X.X.X" where X.X.X.X is the IP adress of the internal pc.
(Wireshark - Capture Options - and I enter in the Capture Filter field this, after then Start)
I have one staticly assigned real IP on the WAN, and dhcp assigned private IP's for internal pcs (192.168.0.X), they 
are assigned based on each pc's MAC adress, so they are constant and not interchanging. 

What I'm doing wrong or why outgoing packets doesn't appear in Wireshark ?

There is an example in Wireshark Users 



      
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread: