This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

When I capture ping test in Wireshark, I only see the Reply and no Request, why?

2

I was doing a connectivity test by sending ping from a host to a destination [email protected] I was only seeing the Reply to the ping but not the Request in Wireshark. Is this normal? I was expecting to see a line for the ping Request and another line for the ping Reply

asked 21 Apr '12, 08:29

redeem314's gravatar image

redeem314
31113
accept rate: 0%

was there any display or capture filter in place (Display: ip.src / ip.dst Capture: src / dst)?

(25 Apr '12, 17:00) Kurt Knochner ♦

I have a similar problem. I have a WLAN interface and a VPN interface. On the WLAN I can see both requests and replies. But on the VPN interface I can only see replies.

(24 Sep '12, 13:06) Michael Closson

Hi I am having the same problem. I am seeing the reply packets but not the request packets. Any ideas as to what the problem can be?

[I am running Wireshark v1.8.3 on Windows 7]

(31 Oct '12, 02:59) tcal0005

I have solved my problem - my firewall was blocking the packets.

(31 Oct '12, 03:31) tcal0005

I can't see the reply packets instead.

(10 Mar '15, 13:27) cbehling

One Answer:

0

You should see the icmp request also. It all depends on where your packet capture point is. Are there multiple paths between the two hosts in question? It's possible the icmp request went one path while the reply was returned over a different path. How are your Wireshark filters setup? Can you see bi-directional traffic from both hosts your interested in?

answered 25 Apr '12, 07:52

GeoffP's gravatar image

GeoffP
40237
accept rate: 0%