C.3 Wireshark Hardware Requirements
There are no particular hardware requirements regarding the PC you run Wireshark
on. Basically anything running any version of Windows can run Wireshark. There are
also Linux and Mac versions.
The "hardware requirement" that is of most concern is the means of connecting to the
network. We typically just connect everything Ethernet to a switch and don't worry
about it. However, switches are really unmanaged routers, and they filter traffic.
Therefore, your PC will not see traffic passing back and forth between two other
devices that are not the PC. In order to see that network traffic using Wireshark, you
need to come up with the right kind of network connection.
If your PC itself is one end of the network conversation you wish to capture, for
example when running the MIB Browser, then Wireshark will capture all network traffic
to and from the PC however connected. It is when your PC wants to simply
"eavesdrop" that you run into problems with the network switch.
A while back, 10BaseT hubs were common. A 10BaseT hub is not as smart as a switch
and does not filter traffic. If you have an old 10BaseT hub collecting dust somewhere,
you now have a new use for it. It will let Wireshark see all traffic from the PC that goes
between any other devices connected to that 10BaseT hub. Beware of devices that call
themselves "hubs" but support 100BaseT connections. These are switches.
Since manufacturers of hubs decided nobody should have a use for them anymore,
they are generally out of production. Finding a 10BaseT hub for sale is not easy (try
eBay). But there are other alternatives.
One means of monitoring network traffic is to get a managed switch that supports
"port mirroring". One such device we have tested is the TP-LINK model TL-SG105E.
Setting it up requires utility software (provided with the switch) and takes a little effort
to get configured. But once configured, it works well without any further monkeying
around. And it is inexpensive.
The other means of monitoring traffic is with the use of a device made specifically for
use with Wireshark. The "SharkTap" provides two connections for the network pass-
through, and a third "tap" connection where you connect your PC running Wireshark.
There is no configuration required. It is the simplest way to monitor network traffic,
and it is a current production item available on Amazon (as of 2021).
C. Trouble Shooting
file:///C:/AAA_CSI/Literature/2021 User Guides/BB3-6101-MX-61 Use...
2 of 3
5/4/2021, 9:58 AM