Wireshark · Ethereal-users: Re: [Ethereal-users] Regarding the Ethereal software

[aferen@xxxxxxxxxxxx (Andrew C. Feren)]

"Patel, Harsh" <Harsh.Patel@xxxxxxxxxxxxxxx> writes:

[ snip ]

> I tried different combinations and what I found was, the Ethereal
> Software was able to trace the SIP packets only when the machine on
> which it was installed was involved in the activity.(in my case it
> was SIP_UA1 and SIP_UA2), so if I try to capture SIP packets without
> the involvement of the SIP_UA1 or SIP_UA2 then ethereal software was
> unable to trace the SIP packets.

        Did you select "Capture packets in promiscuous mode" when you
        started the capture?  

        For some versions of ethereal this is not the default.  If you
        don't select this (or your NIC doesn't support promiscuous
        mode) then you will see the above behavior.

-- 
-Andrew Feren
 Cetacean Networks, Inc.
 Portsmouth, NH