Ethereal-users: Re: [Ethereal-users] Capture packets in one direction sonly

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Wed, 26 Dec 2001 13:03:40 -0800
On Wed, Dec 26, 2001 at 05:22:08PM +0530, Praveen Pavuluri wrote:
> 	I have a peculiar problem of not being able to capture packets from both
> directions. Basically ethereal is running on a win2k pc with IP 'X'  I need
> to monitor any traffic that happens @ host 'y'. I am able to capture only
> packets which have destination as 'y'. But transmissions from 'y' are not
> being captured. Why is this so?

Are the transmissions from "y" being sent to the IP address "X"?  I.e.,
are they being sent to the machine on which Ethereal is running?

If not, this may be a switched-network or 10/100Mb hub problem, which
prevents a machine on one port of a switch/switching hub or on one port
of a 10/100Mb dual-speed hub from seeing all the traffic on the network,
even if the machine's network interface is running in promiscuous mode:

	http://www.ethereal.com/faq.html#q4.1