I have Wireshark running on a client PC and it is only collected traffic in one direction. I see responses from the remote device but not the client Wireshark is running on. I am using a host filter: host xxx.xxx.xxx.xxx or host xxx.xxx.xxx.xxx. I have promiscuous mode enabled and don't have anything enabled which would block the traffic from the WS client. Any help you can provide would be greatly appreciated. asked 06 Jul '15, 11:37  snifferguy |
One Answer:
In the past this issue has been found to be due to AV, firewall or VPN endpoint software. Are you sure you don't have anything like that installed? answered 06 Jul '15, 14:59  grahamb ♦ |
I'm checking and will get back to you. Thanks!
We tried it on a different machine and were able to get bi-directional data. We're still looking into why the other machine only captures one way. Thanks for your help.
Would be nice if you could post your final finding. So we all can learn from that.