Ehm, yes. The interface leaves promiscuous mode when the capture is stopped.
Without knowing anything else of this interface the traffic could drop back to 0%.
Thanks,
Jaap
On 06/03/2015 09:02 PM, Hanks, Cliff wrote:
> Is this normal? I restarted a tShark capture to increase the number of files for
> a ring buffer and noticed that the LAN connection, that I am capturing on, was
> showing no traffic while tShark was stopped but started back up after the
> capture was restarted, like promiscuous mode was restarted as well????
>
>
> *Cliff Hanks* MCSE,GSEC
> Senior Network Engineer
>