Dec 18, 2008 18:57
Networking is one of the many areas of computing that I'm really not that knowledgeable about, however, recently I've found myself with a need to use network analysis software/packet sniffers like Wireshark to determine what a particular piece of software was actually doing. A problem arises though because using Wireshark involves (afaik) both installing it on the box running the software concerned and having (however briefly) admin privileges.
Now, short of running Wireshark actually on a router/switch (if such a thing is possible) or having unfettered access to one, I've been wondering whether it's possible to insert a computer with two network interfaces between the client and its original network cable and have this analysis machine appear pretty much transparent as far as the machines on either end are concerned.
I imagine there are good reasons why this might be difficult, but I was wondering if anyone could tell me whether it's possible (and if not why) or if someone has already done it?