Ethereal

Re: [Ethereal-users] Wireless (Prism) Card: Only Incoming Packets?
Google
 
Web Ethereal.com

Home | Introduction | Documentation | Lists | FAQ | Development | Wiki | Bugs

Ethereal-users: April 2002


On Wed, Apr 03, 2002 at 05:59:07AM -0800, Robinson, Eric R. wrote:
> I am only seeing INCOMING packets... no outgoing packets. If I ping
> something, I see echo REPLIES but no echo requests, etc. In short, I am only
> seeing one side of any conversation.

Ethereal is at the mercy of libpcap/WinPcap, and libpcap/WinPcap is at
the mercy of the device driver for the networking device and the
networking code in the OS.

If you're not capturing in promiscuous mode, try capturing in
promiscuous mode; some drivers might not show outgoing packets to
capture programs unless the networking device is in promiscuous mode.

If you *are* capturing in promiscuous mode, the driver might *still* not
be supplying outgoing packets to capture programs.

There's nothing we (or the WinPcap developers) can do about the driver. 
I'd suggest asking whoever supplied the driver (Microsoft, or the
networking card supplier).



Powered by MHonArc 2.6.10