ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: [Wireshark-users] only one instance of broadcast packets

From: "Mihovil Pupovac" <mihovil.pupovac@xxxxxxxxx>
Date: Sat, 15 Nov 2008 12:50:51 +0100
Hi,
I have a DLINK switch which has all 22 Rx and Tx ports mirrored to one port on which i connected wireshark. Switch receives an Ethernet brodcast ARP request which is then forwarded to all 22 switch ports. Why does wireshark show only one instance of that packet instead of 22 instances? Is there a mechanisam which prevents wireshark to show the same packet more than once? How do i override that mechanisam?
 
Best regards,
Mihovil