This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to setup Wireshark with Astaro

Hello, I would like to use Wireshark to examine network traffic.

I would like my Wireshark box to "see" everything that enters and exits the WAN interface on my ASG.

Currently, my cable modem connects directly into a dedicated WAN interface on the ASG box I built. It is OK if the Wireshark box is on a fully exposed DMZ, but note that I only get one public IP from my ISP.

I have an internal LAN interface, as well as a DMZ interface that connects to a second, more relaxed firewall, and then to my PS3.

I have slots for one more NIC card on this box, but I would prefer a solution that does not use any more NICs.

Thanks.

My switches and NICs all support vLAN if that helps, but none are implemented atm.

This thread was automatically locked due to age.

0 BAlfson over 15 years ago

I don't think Wireshark depends on having a "valid" IP - just put it on a hub (not a switch) with the External interface of your Astaro.

But, first try using tcpdump from the Astaro command line.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 Jack Daniel over 15 years ago in reply to BAlfson

Wireshark is a fantastic tool, and it makes capture and analysis simple- but don't shy away from tcpdump. If you are not familiar with it, there is a great tcpdump tutorial at Daniel Miessler's blog: A Tcpdump Tutorial and Primer | danielmiessler.com

You can always capture on the ASG using tcpdump, then SCP the capture to a workstation running Wireshark for analysis.
Cancel
Vote Up 0 Vote Down

Cancel
0 astarohome1 over 15 years ago in reply to Jack Daniel

Thanks guys!

I'll try tcpdump!

Beats buying another NIC or finding my 1997 hub.

I just glanced at that page. I didn't see anything about "SCP"

Can you tell me what that is?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 15 years ago

Google WinSCP - easy file transfer with Astaro. Remember to capture the file to a location where you can make loginuser the owner (read about Astaro command line access, and you'll understand).

Cherers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 15 years ago

Astaro V7 How To Sniff The Traffic Directly On The Firewall Using tcpdump and Wireshark: Astaro V7 How To Sniff The Traffic Directly On The Firewall Using tcpdump and Wireshark
Cancel
Vote Up 0 Vote Down

Cancel