Hi All, I am running Wireshark 1.6.2 on a Windows 2008 server. However, I am unable to see any packets originating from the server. If I ping a remote host, I can see the return packets but not packets sent from the local host. Any clues? Bashment asked 23 Sep '11, 08:47  BASHMENTY2K edited 24 Sep '11, 15:21  helloworld |
This is a static archive of our old Q&A Site.
Please post any new questions and answers at ask.wireshark.org.
Has this server more than one network adpater?
The configuration of the server is: Physical NIC = 2, However,one card is disabled IP Addresses: 1 + 3 virtual addresses used by the Microsoft NLB cluster, of which this server is a member OS: Windows 2008 Web Server
Note that the other cluster members are of similar hardware and software config, but wirshark works just fine on these servers.
Bashment
Try to check on every adapter wireshark provides as capture source and search for your outgoing traffic. In some cases e.g. two adapters in the same IP subnet, windows is theoretically able to send traffic out of a different card that the one designed as recipient for the answers