Re: [Ethereal-users] Ethereal does not capture all packets?

[Guy Harris <gharris@xxxxxxxxx>]

asdf wrote:

> The machines are plugged into a switch. The clients can capture each 
> other, if I run it on clients.

"Can capture each other" in the sense that you have Ethereal running on 
one client it can capture traffic from another client?  If so, can it 
capture *unicast* traffic (such as TCP traffic) from another client even 
if it's not being sent to the client running Ethereal?

If so, I assume that means you configured the switch port for the client 
running Ethereal to do "port mirroring" (or whatever the switch vendor 
calls it), as switches generally send unicast traffic only to the port 
the destination is plugged into, if it knows what port that is.