Ethereal-users: Re: [Ethereal-users] Ethereal does not capture all packets?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Sun, 19 Feb 2006 13:25:48 -0800
asdf wrote:

The machines are plugged into a switch. The clients can capture each other, if I run it on clients.

"Can capture each other" in the sense that you have Ethereal running on one client it can capture traffic from another client? If so, can it capture *unicast* traffic (such as TCP traffic) from another client even if it's not being sent to the client running Ethereal?

If so, I assume that means you configured the switch port for the client running Ethereal to do "port mirroring" (or whatever the switch vendor calls it), as switches generally send unicast traffic only to the port the destination is plugged into, if it knows what port that is.