Once the problem which is to be analysed has been reduced, click on Stop.If packets are still not being captured, try removing any filters that have been defined. It will probably be a long alpha-numeric string. Examine the interface list and pick the one that is not associated with the WANIP. The capture dialog should show the number of packets increasing. Now click the Start button to start the capture.Enable transport name resolution: Wireshark will attempt to resolve transport names.Also will attempt to resolve network names for other protocols.

Enable network name resolution: Wireshark will issue DNS queries to resolve IP host names.Enable MAC name resolution: Wireshark contains a table to resolve MAC addresses to vendors.Hide capture info dialog: Disable this option so that you can view the count of packets being captured for each protocol.Automatic scrolling in live capture: Wireshark will scroll the window so that the most current packet is displayed.Update list of packets in real time: Disable this option if the problem that's being investigated is occurring on the same workstation as where Wireshark is running.Stop capture after xxx second(s): Bluecoat Technical Support would most likely never use this option.Stop capture after xxx kilobyte(s) captured: Bluecoat Technical Support would most likely never use this option.Stop capture after xxx packet(s) captured: Bluecoat Technical Support would most likely never use this option.The file name should be specified if the ring buffer is to be used. When a file fills up, it will wrap to the next file. Use multiple files, Ring buffer with: These options should be used when Wireshark needs to be left running capturing data for a long period of time.By default Wireshark will use temporary files and memory to capture traffic. Capture file(s): This allows a file to be specified to be used for the packet capture.Filters: Generally, Bluecoat Support prefers an unfiltered trace.Bluecoat Support will always want to see full frames. Limit each packet to: Leave this option unset.Capture packet in promiscuous mode: This option allows the adapter to capture all traffic not just traffic destined for this workstation.Note the following recommendations for traces that are to be analysed by Bluecoat Technical Services: If capture options need to be configured, click the Options button for the chosen interface.Select the interface on which packets need to be captured.After starting Wireshark, do the following:

Enable promiscuous mode wireshark mac