Ask Your Question

Why does host receive IP packets not meant for this host?

asked 2019-11-06 02:28:26 +0000

vkd gravatar image

We ran a wireshark trace on a windows computer for a short period. In the wireshark trace we see IP packets which are not meant for this computer. The source IP and dest IP does not match the computers IP address. Also when we check the mac addresses of these IP packets, then the source and dest MAC also do not match the computers mac address. The messages are also unicast messages (so not broadcast messages). We use decent switches (cisco SG350X) and have not enabled things like port mirroring. So i would expect that the computer with wireshark should only receive IP packets meant for this computer and not packet for other computers.

What can be the reason for receiving other IP packets?

edit retag flag offensive close merge delete

1 Answer

Sort by » oldest newest most voted

answered 2019-11-06 04:08:29 +0000

Chuckc gravatar image

You could tell Wireshark not to capture in promiscuous but that won't stop the packets from being sent by the switch. This seems to be an issue with your switch not Wireshark. The answers below might be a good starting point:

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2019-11-06 02:28:26 +0000

Seen: 460 times

Last updated: Nov 06 '19