Help with Wireshark? Want to know what IP traffic is turning on my Samsung TV

All in the title, for 6 months got a new Q70 Samsung TV. This TV when you select options: “Allow to be switch on with mobile device or IP” sometimes switch on by itself, generally around 20 seconds after I manually switch it off with Samsung remote or android App. Once it wake up around 2AM… Wanted to investigate IP side, as this is not HDMI ARC side. So I installed Wireshark and set a capture filter like “host 192.168.xxx.xxx”, but I can see nothing when I switch on off the TV through IP. I suspect something like a WOL from some device… Any suggestions?

Hi Chris, where are you getting the capture from i.e a mirrored switch port etc? it could be that if your not getting the correct traffic flows.

let me know and ill see if i can figure it out.

thanks for your answer, from PC connected in my local network. when I do not apply filter, I can see plenty of datas scrolling, I’m not sure to use this tool correctly. First test, just wanted to detect some packets when I switch on TV, no success… Will need some tuto, if you’ve a link, you’re welcome!

no problem, that wont work since i presume your using a switch (this is either a dedicated network switch or a router you have) switches dont broadcast the packets flowing on your network to all ports like the old hubs used to. if you have an old one lying about then you could use that. or if you have a dedicated switch that can do port mirroring then you can use that.

Let me know how your network is set up and we can take it from there.(a basic digram will do)

e.g.

PC – SWITCH – ROUTER
TV – SWITCH – ROUTER
TV – ROUTER (I suspects its this one)

Sorry, yes of course, I use the following configuration:
TV is connected direct to the Router®, then I have a Switch (S) connected to the Router. Then my PC (Wireshark installed) is connected to this Switch. So:

R – TV
R – S – PC