Sniffing Traffic Remotely

How can I wireshark sniff traffic on another work site that I connect thru VPN/VNC from my laptop?  Do I have to run wireshark from a local workstation that is on the subnet I am dialing into?  Is there a way to configure SPAN/port mirroring when I am working remotely from my laptop?
tike55Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

JohnBusiness Consultant (Owner)Commented:
You can try putting Wire Shark on the remote machine and then log into the remote machine to see what is happening.

You can use Comm View (Tamosoft) and Tamosoft Remote Agent to do this. Not free but top drawer product.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
nociSoftware EngineerCommented:
In stead of wireshark, there is the tshark tool, (part of wireshark) that accepts a command line invocation.
(It saves on the need of having remote graphic access.)

Also be sure to filter all traffic to YOUR system from the remote system as that is the traffic you don't want to see. (adding it will also add MORE traffic).
Best would be to run tshark from a shell script. to not contaminate the traffic recording with the remote access.

(Span port requires some certain models of switches that allow remote spanning).
2
jorge diazSECommented:
I agree with John, it' may be easier to simply have a local host at the remote site. You can then connect to it and hop on your switch to do capture traffic. There's something called RSPAN but it requires certain type of devices and infrastructure to work.
0
JohnBusiness Consultant (Owner)Commented:
Thank you and good luck with checking the other site.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Networking

From novice to tech pro — start learning today.