This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Why is Wireshark using Dell Latitude E6400 not capturing all data ?

0

Running various versions of Wireshark on a Dell Latitude E6400 only displays some TCPIP data in one direction and IP traffic etc. from laptop in the other when monitoring the link in the other direction. We are using a Copper Tap A & B outputs.
All other models of Dell laptop e.g E4300, D630 etc. work ok. All are using XP and have exactly the same build and configuration. All setups appear to be identical, could this be a Dell driver issue ? The Dell E4300 and E6400 appear to have the same net hardware implemented yet one model works and the other doesn't. I have tried this on three of each model with consistant results.

asked 13 Jun '12, 10:56

TR%20shark's gravatar image

TR shark
1●1●1●1
accept rate: 0%

One Answer:

1

Could be a driver problem or a problem with interfering software. To eliminate the driver problem, I suggest to use a live image of BackTrack 5R2 (Linux / contains Wireshark) and run it on your sniffer PC.

http://www.backtrack-linux.org/tutorials/usb-live-install/

Regarding the interfering software, please check similar problems:

http://ask.wireshark.org/questions/11714/only-inbound-traffic
http://ask.wireshark.org/questions/11560/unable-to-capture-or-display-incoming-tcpip-packets-with-port-8100

Regards
Kurt

answered 13 Jun '12, 23:56

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k●10●39●237
accept rate: 15%

edited 14 Jun '12, 00:19