Ethereal-users: Re: [Ethereal-users] Ethereal Question

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date: Sat, 8 Jan 2005 23:37:26 +0100
>  The only protocols I can see on
> other computers are SMB and NBSS. I am not running a filter. 

What you see is your traffic and broadcast traffic. That means one of
two thigs (or both):
1) you are not capturing in promiscous mode (your interface passes
through just the packets sent to it's address and broadcasts)
2) you are attached to a switch, in which case the frames to other
machines do not arrive to your PC

For 1) there's a setting in the capture dialog.

For 2) the thing is more complex if your switch supports mirroring you
should configure it and plug the sniffing PC to the mirror port of the
switch. If it doesn't support mirroring you cannot capture traffic
through that switch without doing some trick like arp poisoning.

Take a look at http://wiki.ethereal.com/CaptureSetup to see howw you  can do.