Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: Re: [Ethereal-users] Where Did the Packets Go?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: ronnie sahlberg <ronniesahlberg@xxxxxxxxx>
Date: Fri, 3 Dec 2004 07:38:10 +1100
You dont have anything like BlackIce or some other filterwalling
software running do you?



On Thu, 2 Dec 2004 14:40:45 -0500, Nunez, Paul <paul.nunez@xxxxxx> wrote:
> Hi All,
> 
> A general question:
> 
> If you're running Ethereal on a Windows 200x system, capturing without
> any filter, while at the some time capturing the same traffic using the
> port spanning feature of the port to which the W200x is connected, and
> Ethereal captures only a few of the hundreds of packets captured by the
> spanned port, where did the packets go (why didn't they get to
> Ethereal)?
> 
> I've been told the packets must be getting dropped by lower layers of
> the TCP/IP stack, but I don't buy that. Ethereal is in promiscuous mode
> so should be capturing anything the network interface "sees", no?
> 
> Thanks for straightening me out...
> 
> Paul
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>