I just noticed that on my computers I am no longer able to capture my first SYN outgoing in a conversation. If I start a conversation, there is [SYN, ACK] [ACK] and if someone else starts there is [SYN][ACK] All offloading is off, there were no driver updates from me ( on the one machine I just updated NIC Drivers and Wireshark to 2.05, no change) If I plug in the profishark, everything is there, I just cannot see it on my windows 7 boxes when I capture locally. Just checked with colleague on a different computer model, he has the same issue. AV uninstalled, firewall off, same issue. This is also on legacy wireshark. Version is QT. Bit strange that it should just appear, it was okay. Could be windows updates etc.. anyone got an idea? Probably just ticked something I shouldn't have... asked 02 Aug '16, 06:26  DarrenWright |
One Answer:
1: NEVER trust MS.. 2: Looked at the NIC saved settings again and noticed a lot of missing options.. MS Windows update has also updated my NIC driver / Caused a reset of its settings. 3: NIC deleted, removed including device drivers, re-installed. Set all Offloading again correctly, [SYN] Packets back. Probably a perfect example of never trust anything you see at first glance, check check and recheck. answered 02 Aug '16, 22:37 DarrenWright |
