Unable to receive the unicast traffic from others

unicastnotseen

asked 2019-06-26 06:45:47 +0000

SDKIM
1 ●1

OS : Win10 NIC : Intel ethernet 10G 2P X520 Switch : Cisco 2950 Link speed : 1G

My server is directly connected to the mirror port of the switch. I'm only able to receive the broadcast/multicast traffic inside the network, but unicast from others is not seen at all. (MonitorMode or MonitorModeEnabled = 1 registry setting is also done) Of couse I tried to use other onboard NIC but it worked very fine. Is there any possible reason for this?

Any comments will be helpful.

edit retag flag offensive close merge delete

add a comment

1 Answer

Sort by » oldest newest most voted

answered 2019-06-26 10:14:48 +0000

SYN-bit

18344 ●9 ●301 ●255 https://SYN-b.it

I can think of two reasons you are only seeing broadcasts and multicasts:

There is no monitor session defined on the switch (or maybe it is not configured properly)
The Intel NIC was not put into promiscuous mode, did you select promiscuous mode in Wireshark when you started the capture?

edit flag offensive delete link

Comments

Thanks for your reply. As I mentioned, other NIC is working fine as I expected. This means there is no issue on the switch config. And wireshark's Promiscuous mode is also on. NiC seemed to discard the unicast traffic..don't know why..

SDKIM ( 2019-06-26 10:29:45 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2019-06-26 06:45:47 +0000

Seen: 317 times

Last updated: Jun 26 '19

Unable to receive the unicast traffic from others edit