Im trying to capture 802.11 traffic on Windows; why am I seeing packets received by the machine on which Im capturing traffic, but not packets sent by that machine?
This appears to be another problem with promiscuous mode; try turning it off. Q 8.11: I’m trying to capture Ethernet VLAN traffic on Windows, and I’m capturing on a “raw” Ethernet device rather than a “VLAN interface”, so that I can see the VLAN headers; why am I seeing packets received by the machine on which I’m capturing traffic, but not packets sent by that machine? A: The way the Windows networking code works probably means that packets are sent on a “VLAN interface” rather than the “raw” device, so packets sent by the machine will only be seen when you capture on the “VLAN interface”. If so, you will be unable to see outgoing packets when capturing on the “raw” device, so you are stuck with a choice between seeing VLAN headers and seeing outgoing packets.
Related Questions
- When I use tcpdump to capture packets, why do I see only packets to or from my machine, or why do I not see all the traffic Im expecting to see from or to the machine Im trying to monitor?
- When I use Wireshark to capture packets, why do I see only packets to and from my machine, or not see all the traffic Im expecting to see from or to the machine Im trying to monitor?
- Im trying to capture 802.11 traffic on Windows; why am I seeing packets received by the machine on which Im capturing traffic, but not packets sent by that machine?
