Need some help with wireshark or a link to a good site with a guide.?

Here is my problem, something or someone on my network is eating up the whole T1 line and i need to resolve this issue. I got a swtich that everything is being piped through to the firewall with only my PC hooked to it as well. This part i know is setup right problem i'm having is getting wireshark to pick up other packets, it just keeps showing the ones from my PC. Wincap is installed and it is in promiscous mode so just not sure what i'm doing wrong.

Boberelli2008-10-02T13:15:26Z

Favorite Answer

You need a manageable switch you can run SPAN (Switch port analyzer) which will send all frames to a specifies destination port, like the one you are running wireshark on. Bear in mind a switch will only forward unicast, broadcast and sometimes multicast frames to your source port, they don't replicate all frames out all ports like hubs do.