Ethereal-users: RE: [Ethereal-users] Cannot see traffic from my machine?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "Sammy Ballew" <saballew3@xxxxxxxxx>
Date: Fri, 19 Apr 2002 16:30:21 -0500
> 
> On Fri, Apr 19, 2002 at 03:51:56PM -0500, Sammy Ballew wrote:
> > Is this correct behavior? Is there an option which
> > I should enable to see outbound traffic?
> 
> Are you doing a promiscuous-mode capture?

I see the same behavior when promiscuous is enabled
or not. When I disable promiscuous I still see traffic
that indicates something else is setting the interface 
to promiscuous.

> 
> If not, try doing that.  The underlying networking mechanism (NDIS +
> drivers) that the capture mechanism Ethereal uses (WinPcap) may only
> show outgoing packets if you're capturing in promiscuous mode.

With no filters I do see outgoing ARP packets but no TCP. Does it make
sense the "underlying networking mechanism" to which you refer would
capture ARP but not TCP?

sammy