On Sat, 27 Sept 2025 at 10:48, CAREY SCHUG via Talk <talk@lists.gtalug.org> wrote:
I think (but I've been wrong so much, would like to check) these would do it. My current office switch is 8 ports, but should probably replace it and increase, rather than adding another serial link in the chain? https://www.ebay.com/itm/277246206249 https://www.ebay.com/itm/197496478450
You would want to replace the switch that is attached to your Comcast gateway; the first switch in the chain. You won't need any additional ports on the switch. Just put the port attached to your machine running Wireshark into mirroring mode. Either of the switches you linked to would work but I'm not sure I'd trust a "genereic" brand. If an 8 port switch would suffice, and you can get to a Canada Computers store, this TP-Link model would work. https://www.canadacomputers.com/en/managed-smart-switches/74300/tp-link-8-po...
Also want to make sure I won't have to set up a second NIC on my desktop computer use to use for this.
No, you don't need a second port dedicated for monitoring.
I don't understand, do I neeed to make my NIC be promiscuous? will wireshark (and tshark) do that automatically?:
With the proper privileges, Wireshark or tshark will put the NIC into promiscuous mode as necessary. -- Scott