When attempting to do a packet capture with Wireshark running under Windows XP on my Macbook Pro, I only see packets sent from the device I am monitoring. I never see any packets sent to the device. If I use the Mac version of Wireshark I see both sent and received packets. For instance, when using another device to PING the monitored device, I only see the ICMP replies from the monitored device. This is a bootcamp installation of XP and I am booting directly into the partition and not running under VM. In addition, this behavior is consistent when using a Fluke Networks monitoring tool as well. Has anyone else and any success in using Wireshark under Windows XP on a Macbook Pro? asked 22 Jun '11, 09:11 rjenk |
Are you capturing on the Ethernet interface or the AirPort interface?