I am trying to capture packets to and from host 10.0.0.30. In the Capture Options Dialogue box I entered a Capture Filter with Filter String: host 10.0.0.30 When viewing the captured File I only see packets that were destined for the 10.0.0.30 address. Do I need to do something different to get both directions? FYI, when I look at a capture file with no Capture Options I see packets to and from the 10.0.0.30 address. Unfortunately I am capturing a VERY busy interface and get gig's of data every second, so capturing without a filture is not workable... asked 23 Jan '13, 14:36 kporter5302 |
Are you running the program doing the capturing on host 10.0.0.30, or on some other host (passive sniffing)?
If it's on host 10.0.0.30, what version of what operating system is it running?