Ask Your Question

Revision history [back]

It's likely that the "attacking" device for your "ping of death" is external to your firewall, and probably spoofed for good measure.

To see anything with Wireshark you'll need to arrange a capture on the interface of the firewall that is receiving these packets. The firewall may be able to perform a capture itself that you can then inspect with Wireshark.

See the Wiki page on Ethernet capture setup for more info, with particular interest on capturing switched networks.