This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Wireshark - cannot see my own sent traffic

0

Hi folks,

I have a weird issue I have been battling with for a couple of days now.

I'm using a Dell Latitude E5440 on Windows 10, and up until a couple of days ago I could use Wireshark fine. It still runs and monitors traffic great on the mirror port on my switch - but all of a sudden I'm not seeing my own PCs outgoing traffic.

It actually works fine, i.e. I can browse websites, use a SIP client, ping my gateway and all of that works - it just doesn't show my PCs outgoing traffic on WS. Since the problem happened I have uninstalled/reinstalled WS and WinPcap, also disabled symantec antivirus/firewall - no different. Also reinstalled network card driver.

I'm pretty sure I have removed all capture and display filters, and I doubt they would remain after reinstall (included removing personal settings).

Any ideas? One clue may be that ALL interfaces e.g. both my wired ethernet and wireless interfaces show the same symptoms?

Any ideas?

Thanks

Neil

asked 15 Apr '16, 20:22

Neil's gravatar image

Neil
6112
accept rate: 0%

Comment - tried this with both WS 1.12.7 and 2.0.2, same problem.

(15 Apr '16, 20:51) Neil

2 Answers:

0

also disabled symantec antivirus/firewall -

sounds like the 'standard' problem we have seen a lot here. Some security software on the device might interfere with WinPcap. Please uninstall any security software, as it has been reported, that only disabling does not help in certain cases, especially with Symantec Endpoint Security, but also others.

See also my answer to a similar question:

https://ask.wireshark.org/questions/28909/no-outgoing-packets

Regards
Kurt

answered 19 Apr '16, 09:26

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

0

answered 19 Apr '16, 19:54

Yang%20Luo's gravatar image

Yang Luo
9117
accept rate: 4%