Ask Your Question

Revision history [back]

Wireshark not showing unicast packet when it was started when the interface is down

Hello All, I am trying to debug an issue, where i am monitoring my ethernet interface which is connected to a switch which is a mirror port. I want to capture all the frame coming out of the switch one its powered on. When i connect my windows 11 laptop with the native ethernet port, I do not see any unicast packet not destined to me showing on the Wireshark which is send from the mirrored port of the switch

When i restart the Wireshark again after this i can see all the packets

Seems like when the ethernet interface is down and Wireshark is started, the promiscuous mode is not set it seems.

Is there any solutions to this ? or something else happening ?

Wireshark not showing unicast packet when it was started when the interface is down

Hello All, I am trying to debug an issue, where i am monitoring my ethernet interface which is connected to a switch switch, which is a mirror port. port, ie there will frames coming with destination as not my PC MAC address/IP address. I want to capture all the frame coming out of the switch one its powered on. When i connect my windows 11 laptop with the native ethernet port, I do not see any unicast packet not destined to me showing on the Wireshark which is send from the mirrored port of the switch

When i restart the Wireshark again after this i can see all the packets

Seems like when the ethernet interface is down and Wireshark is started, the promiscuous mode is not set it seems.

Is there any solutions to this ? or something else happening ?

Wireshark not showing unicast packet when it was started when the interface is down

Hello All, I am trying to debug an issue, where i am monitoring my ethernet interface which is connected to a switch, which is a mirror port, ie there will frames coming with destination as not my PC MAC address/IP address. I want to capture all the frame coming out of the switch one its powered on. When i connect my windows 11 laptop with the native ethernet port, I do not see any unicast packet not destined to me showing on the Wireshark which is send from the mirrored port of the switch

When i restart the Wireshark again after this i can see all the packets

Seems like when the ethernet interface is down and Wireshark is started, the promiscuous mode is not set it seems.

This doesn't happen with a USB to Ethernet adaptor

Is there any solutions to this ? or something else happening ?