This also is dependent on the security mode of the network WPA uses per-device session keys, so you can't see the traffic to other stations because it's encrypted by a key you don't know. However, many network interfaces aren’t receptive to promiscuous mode, so don’t be alarmed if it doesn’t work for you. To enable the promiscuous mode on the physical NIC, run the following command on the XenServer text console: ifconfig eth0 promisc Run the ifconfig command.

If everything goes according to plan, you’ll now see all the network traffic in your network.

Modern networks use switches, which inspect the destination addresses of packets and only send it to the port it needs to go to, rather than broadcasting it to all ports (which is what traditional Ethernet, as embodied by shared-medium methods such as 10Base2, and emulated with twisted-pair 'hubs', did).įurther, despite 802.11 series standards using a shared medium (radio waves) promiscuous mode (more properly called 'monitor mode' in the wireless world) may or may not work depending on the wireless chipset and driver, because many devices are implemented in such a way that they don't allow sufficient control to actually cause the physical hardware to pass packets not intended for the station up to the OS. How do I set promiscuous mode in Wireshark T o turn on promiscuous mode, click on the CAPTURE OPTIONS dialog box and select it from the options. It doesn't have magical powers to go out onto the network and collect packets destined for other NICs. What you missed is that promiscuous mode only captures traffic that your promiscuous NIC sees.

How to use promiscuous mode wireshark