Wireshark · Ethereal-users: [Ethereal-users] Newbie question - Session Capture at multiple points for comparison

[Charles Marcus <CMarcus@xxxxxxxxxxxxxxxxx>]

Hi everyone,

I'm very new to packet sniffing in general, as well as to ethereal, but 
I have a pressing need to get some information to help diagnose a 
problem we are having with one of our web-based applications...

I am in the process of reading the User Guide for ethereal, but being 
new, it will definitely take some time to learn how to use this.

Basically, first I'd like to know if I can even do what I need to do (I 
still want to learn how to use ethereal, but right now I need to get 
this data to the Web-application provider), which is:

Capture a session from one particular IP address on an internal network 
from three different places:

a) coming off of the NIC on the workstation

b) coming off of our Firewall WAN interface, and

c) coming off of the ISP Router WAN interface (T-1)

I'd *like* to be able to do this from my workstation (also on the 
internal (private IP range 192.168.xxx.xxx) if possible.

So, if someone knowledgable of ethereal would kindly tell me if this 
indeed can be done using ethereal, I would really appreciate it so I'd 
know if I was beating my head against a wall or not.

I'd also appreciate any tips on exactly *how* to accomplish this, but 
for now, just to know if I can would at least let me know I'm using the 
right tool for the job.

--

Charles