Wireshark-users: Re: [Wireshark-users] Understanding Source and Destination

From: Ian Schorr <ian.schorr@xxxxxxxxx>
Date: Sat, 5 Jun 2010 14:17:39 +1000
Also, does your host have multiple NICs?  It is possible packets are
entering one and leaving through another.  But definitely plausible
that it's an issue at the tap/driver level.

On Fri, Jun 4, 2010 at 8:23 AM, Sake Blok <sake@xxxxxxxxxx> wrote:
> On 3 jun 2010, at 22:13, Gillett, Martin wrote:
>
>> I read this this, but it says " ...why do I see only packets to and from my machine..."
>>
>> The machine, I ran Wireshark from, only shows up in the destination column . I would expect to also it in the source sometimes as well - no ?
>
> One source of this kind of behavior are VPN clients. They nestle themselves into the IP stack and can mess up the capture mechanism in unexpected ways (even when they are disabled through their configuration settings). I *never* install VPN clients on systems that I need to capture on for that reason :-)
>
> Of course this may not apply to your situation...
>
> Cheers,
> Sake
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
>