This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I just noticed that on my computers I am no longer able to capture my first SYN outgoing in a conversation. If I start a conversation, there is [SYN, ACK] [ACK] and if someone else starts there is [SYN][ACK]

All offloading is off, there were no driver updates from me ( on the one machine I just updated NIC Drivers and Wireshark to 2.05, no change)

If I plug in the profishark, everything is there, I just cannot see it on my windows 7 boxes when I capture locally. Just checked with colleague on a different computer model, he has the same issue. AV uninstalled, firewall off, same issue. This is also on legacy wireshark. Version is QT.

Bit strange that it should just appear, it was okay. Could be windows updates etc.. anyone got an idea? Probably just ticked something I shouldn't have...

asked 02 Aug '16, 06:26

DarrenWright's gravatar image

DarrenWright
216141520
accept rate: 26%


1: NEVER trust MS..

2: Looked at the NIC saved settings again and noticed a lot of missing options.. MS Windows update has also updated my NIC driver / Caused a reset of its settings.

3: NIC deleted, removed including device drivers, re-installed. Set all Offloading again correctly, [SYN] Packets back.

Probably a perfect example of never trust anything you see at first glance, check check and recheck.

permanent link

answered 02 Aug '16, 22:37

DarrenWright's gravatar image

DarrenWright
216141520
accept rate: 26%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×55
×42

question asked: 02 Aug '16, 06:26

question was seen: 1,312 times

last updated: 02 Aug '16, 22:37

p​o​w​e​r​e​d by O​S​Q​A