Ask Your Question

Unable to receive the unicast traffic from others

asked 2019-06-26 06:45:47 +0000

SDKIM gravatar image

OS : Win10 NIC : Intel ethernet 10G 2P X520 Switch : Cisco 2950 Link speed : 1G

My server is directly connected to the mirror port of the switch. I'm only able to receive the broadcast/multicast traffic inside the network, but unicast from others is not seen at all. (MonitorMode or MonitorModeEnabled = 1 registry setting is also done) Of couse I tried to use other onboard NIC but it worked very fine. Is there any possible reason for this?

Any comments will be helpful.

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted

answered 2019-06-26 10:14:48 +0000

SYN-bit gravatar image

I can think of two reasons you are only seeing broadcasts and multicasts:

  1. There is no monitor session defined on the switch (or maybe it is not configured properly)
  2. The Intel NIC was not put into promiscuous mode, did you select promiscuous mode in Wireshark when you started the capture?
edit flag offensive delete link more


Thanks for your reply. As I mentioned, other NIC is working fine as I expected. This means there is no issue on the switch config. And wireshark's Promiscuous mode is also on. NiC seemed to discard the unicast traffic..don't know why..

SDKIM gravatar imageSDKIM ( 2019-06-26 10:29:45 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2019-06-26 06:45:47 +0000

Seen: 352 times

Last updated: Jun 26 '19