G+_Brian Ward Posted March 20, 2014 Share Posted March 20, 2014 Can you use the Raspberry pi with wireshark? I know you can use wireshark with linux just not sure if the pi is powerful enough. Link to comment Share on other sites More sharing options...
G+_Aaron Freeman Posted March 20, 2014 Share Posted March 20, 2014 Never tried it but size might be and issue. I recently used wire shark for a VoIP issue and the capture was 6GB... Link to comment Share on other sites More sharing options...
G+_Brian Ward Posted March 20, 2014 Author Share Posted March 20, 2014 I was just wondering if you could save it to a external hard drive for the large storage issue. Link to comment Share on other sites More sharing options...
G+_Aaron Freeman Posted March 20, 2014 Share Posted March 20, 2014 If I had a spare pi I would try but I do not... Hopefully someone else here has an answer. Link to comment Share on other sites More sharing options...
G+_Lucas Van Enger Posted March 20, 2014 Share Posted March 20, 2014 Pi is awesome... There is even an XBMC release for it that works great... Link to comment Share on other sites More sharing options...
G+_Ben Tyger Posted March 20, 2014 Share Posted March 20, 2014 Depending on the throughput of your capture, you could just mount a network drive on the Pi and write the tcpdump output there. Link to comment Share on other sites More sharing options...
G+_Ben Tyger Posted March 20, 2014 Share Posted March 20, 2014 May also be worth while to get USB Ethernet adapter too. So you can have a management NIC and a tracing NIC. Link to comment Share on other sites More sharing options...
G+_Brian Ward Posted March 20, 2014 Author Share Posted March 20, 2014 Thanks for the suggestion. Link to comment Share on other sites More sharing options...
G+_610GARAGE Posted March 20, 2014 Share Posted March 20, 2014 I believe you would also need to recompile the wireshark source to work on an arm architecture. Link to comment Share on other sites More sharing options...
G+_Ben Tyger Posted March 20, 2014 Share Posted March 20, 2014 Wouldn't you just use TCPdump to gather the data to an external disk or network drive. Then just open the file on a real machine. The RPi doesn't have a whole lot of RAM. You probably don't want to waste the little that is has loading the GUI stack intro RAM. Link to comment Share on other sites More sharing options...
G+_610GARAGE Posted March 20, 2014 Share Posted March 20, 2014 Ben Tyger Oh yea, that would work. Link to comment Share on other sites More sharing options...
Recommended Posts