hi , I am using wireshark 1.10.2 with the latest winPcap 4.1.3 all 64 bit with windows 7 64 bit however , the only stream the wireshark capture is the incoming direction but all the outgong are not , no capture filter applied . I uninstalled the whole program with it's dependencies and reinstall it back again with no diffrence . other tools like network monitor tool for microsoft can capture both direction on the same Laptop . note: i have symantic end point protection installed on my device. asked 22 Oct '13, 16:10  Msecurity |
2 Answers:
I have seen this happen on a Ciena core switch (5305) when using a mirror; explanation from Ciena was that they only mirror ingress traffic on that particular model, not egress traffic. They tell me they are "working on a solution". Don't know what device you are spanned on, but might be something to check. answered 23 Oct '13, 08:46  randyp |
See also: InterferingSoftware In my case, installed VPN software prevented seeing outbound traffic and had to be uninstalled. answered 08 Sep '16, 05:57  kbulgrien |
Have you looked here?