Wireshark mailing list archives

Re: Understanding Source and Destination


From: Ian Schorr <ian.schorr () gmail com>
Date: Sat, 5 Jun 2010 14:17:39 +1000

Also, does your host have multiple NICs?  It is possible packets are
entering one and leaving through another.  But definitely plausible
that it's an issue at the tap/driver level.

On Fri, Jun 4, 2010 at 8:23 AM, Sake Blok <sake () euronet nl> wrote:
On 3 jun 2010, at 22:13, Gillett, Martin wrote:

I read this this, but it says " ...why do I see only packets to and from my machine..."

The machine, I ran Wireshark from, only shows up in the destination column . I would expect to also it in the source 
sometimes as well - no ?

One source of this kind of behavior are VPN clients. They nestle themselves into the IP stack and can mess up the 
capture mechanism in unexpected ways (even when they are disabled through their configuration settings). I *never* 
install VPN clients on systems that I need to capture on for that reason :-)

Of course this may not apply to your situation...

Cheers,
Sake
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request () wireshark org?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe


Current thread: