Wireshark not show inbound traffic on public IP server

asked 2021-07-18 20:39:53 +0000

Hi to all, I've a problem on a server online. the server is a windows platform, Public IP on the nic. Naked. no limitations. I've installed Wireshark portable and i'm trying to catch the inbound traffic. I don't receive nothing. I mean, if i ping the server from my home, and filter about icmp there's are no requests, the ping is naturally working and receive packets. Am i wrong something? I don't understand the issue. Can I eventually create a filter for catching only incoming traffic? is there a way? Thank you.

answered 2021-07-18 21:33:21 +0000

grahamb

flag of United Kingdom of Great Britain and Northern Ireland

23790 ●4 ●950 ●227 https://www.wireshark.org

The "portable" version of Wireshark isn't the best choice for capturing traffic as it doesn't include the capture library used on Windows called npcap, instead you would have to install it manually yourself from the npcap website.

Assuming you haven't installed npcap you're probably not capturing on the Ethernet interface that the traffic you're looking for is passing through.

edit flag offensive delete link

Comments

as it doesn't include the capture library used on Windows called npcap

And if it did include Npcap, in order to capture traffic, it would require a networking device driver that's part of Npcap. That driver runs in "kernel mode", which I think may require installing it on your machine, rather than loading it from the storage device containing Wireshark - which, as I understand it, is something that "portable" applications are not supposed to do.

Guy Harris ( 2021-07-19 03:46:30 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Wireshark not show inbound traffic on public IP server

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

Wireshark not show inbound traffic on public IP server edit

1 Answer

Comments