Roger Hayter wrote:

Dave Liquorice wrote:

Wireshark on a machine connected into an ethernet tap somewhere
between the WiFi AP and the router to the ineternet. Might be tricky
if the AP is part of the the router.

With it's NIC in promiscuous mode it just needs to be on the same
subnet.

Not that easy for wifi, and with switches rather than hubs, not that
easy on wired unless you can configure a mirror port, or as Dave says
some other form of ethernet tap ...