This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Using Capture Filter “host 10.0.0.30” only captures Destination packets

0

I am trying to capture packets to and from host 10.0.0.30. In the Capture Options Dialogue box I entered a Capture Filter with Filter String: host 10.0.0.30 When viewing the captured File I only see packets that were destined for the 10.0.0.30 address. Do I need to do something different to get both directions? FYI, when I look at a capture file with no Capture Options I see packets to and from the 10.0.0.30 address. Unfortunately I am capturing a VERY busy interface and get gig's of data every second, so capturing without a filture is not workable...

asked 23 Jan '13, 14:36

kporter5302's gravatar image

kporter5302
1111
accept rate: 0%

Are you running the program doing the capturing on host 10.0.0.30, or on some other host (passive sniffing)?

If it's on host 10.0.0.30, what version of what operating system is it running?

(23 Jan '13, 17:01) Guy Harris ♦♦