[PLUG] Using Wireshark

[Richard C. Steffens]

Tim wrote:
> Yes, I didn't even intend to address his network topology.  He clearly
> needs to do the sniffing on a box that has access to the packets, and I
> too would recommend using a router or even the suspect machine itself.
> With the approach I propose, it would be easy to tcpdump on one box and
> copy the results over to wireshark, assuming he's using a decent OS for
> the sniffing (i.e. not Windows).
>   
Therein lies the problem. The probable suspect machine is running XP.

-- 
Regards,

Dick Steffens
www.dicksteffens.com