Ethereal-users: Re: [Ethereal-users] Cannot see traffic from my machine?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Fri, 19 Apr 2002 14:02:21 -0700
On Fri, Apr 19, 2002 at 03:51:56PM -0500, Sammy Ballew wrote:
> Is this correct behavior? Is there an option which
> I should enable to see outbound traffic?

Are you doing a promiscuous-mode capture?

If not, try doing that.  The underlying networking mechanism (NDIS +
drivers) that the capture mechanism Ethereal uses (WinPcap) may only
show outgoing packets if you're capturing in promiscuous mode.

If that still doesn't work, download WinDump and try doing captures with
it, to see if you see outbound traffic.

If it doesn't see outbound traffic either, report this to the WinPcap
developers; see the "Submitting Bugs" section of the page at

	http://winpcap.polito.it/contact.htm

Note, though, that this may be a driver issue - it worked on my machine
here, although it's running NT 5.0^H^H^H^H^H^HWindows 2000, which might
make a difference (but the driver might also make a difference).  If
it's a driver issue, the WinPcap developers probably won't be able to
help you much, either.