wireshark can capture upd packets from others, but can't capture udp packets from one server which sends out udp by HP iLO. I am sure the server can send udp by HP iLO as hostmonitor can receive its udp packets, no any problem. why wireshirk can't? thanks, George asked 26 Aug '13, 11:17  georgeyu100 |
One Answer:
Maybe the HP iLo traffic is using Unicast UDP packets towards the hostmonitor, while the other UDP packets you see are Broadcast/Multicast. You'll only see the Unicast packets if you capture at a location like a SPAN port. See http://wiki.wireshark.org/CaptureSetup/Ethernet for capture setup options. answered 27 Aug '13, 06:39  Jasper ♦♦ |
wireshark can capture UDP packets from other server port 161
Where and how are you capturing the traffic? Are you using any kind of capture filters? If wireshark is showing that same traffic from other servers, there aren't a lot of possibilities other than that the server isn't sending the traffic, your filters are dropping it, or the place where you're capturing isn't in the line of path of the packets.