 | 1 | initial version |
I think you're seeing the effect of capturing on a device that is processing the packets. Those packets are not actually seen like this on the wire. See this blog post for more details:
https://blog.packet-foo.com/2014/05/the-drawbacks-of-local-packet-captures/
| | 2 | No.2 Revision |
I think you're seeing the effect of capturing on a device that is processing the packets. Those packets are not actually seen like this on the wire. See this blog post for more details:
https://blog.packet-foo.com/2014/05/the-drawbacks-of-local-packet-captures/
And I think you're misinterpreting the quote from the TSO/GSO answer - the capture must not be performed on any device that is part of the packet generation or forwarding. The article means you should use a SPAN port or TAP to capture with an independent device.
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
