When using Wireshark to acquire packet capture on a network, which device would enable the capture of all traffic on the wire?

A network tap is a passive hardware device inserted inline on a network link that creates an exact copy of all passing traffic and forwards it to a monitoring port, without altering or interrupting the data flow. This gives Wireshark full visibility into every packet traversing that segment, including traffic not destined for the capture host.

A Layer 3 switch routes packets between subnets and does not passively mirror all wire traffic to an external capture device by default.

A network bridge forwards frames between segments based on MAC addresses but does not provide a dedicated out-of-band copy of all traffic suitable for passive capture.

An application firewall inspects and filters traffic at the application layer but is not designed to passively mirror raw wire traffic to a capture tool like Wireshark.