Connect Wireshark to the LAN switch attached to the monitored device, and configure a port mirror to the device from which you suspect the problem is coming. Go through the following steps:
- In case of user complaints, configure the port mirror for monitoring the user device.
- In case of a general problem in the network, configure the port mirror to the DNS server:
- When the DNS server is configured on the internal server, configure a port mirror on the server
- When the DNS server is configured on the external server, configure a port mirror to the link that connects you to the internet