This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Traps to other destination is captured in my host NIC while running wireshark

0

Hi,

I am running wireshark in my host say with IP address A.I am having another host in my LAN say with IP address B. Let say a Router R sends SNMP traps to the host B . The wireshark running in my host A,is able to capture the SNMP trap packet.How does this happens?

Thx

asked 23 Jun '11, 22:19

JavaUser's gravatar image

JavaUser
1●1●1●2
accept rate: 0%

One Answer:

3

There are several options .Assuming that

  1. you capture in promiscuous mode
  2. you're on a switched network with host B

Then the router

  1. Might broadcast it
  2. Might multicast it, for which the switch hasn't pruned your link
  3. Might unicast it, for which the switch doesn't have a target port in its switching table

So, have a good look at the traffic and see what applies.

answered 24 Jun '11, 00:15

Jaap's gravatar image

Jaap ♦
11.7k●16●101
accept rate: 14%