Ethereal-dev: Re: [Ethereal-dev] Can't catch traffic on already established TCP connections?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Wed, 16 Oct 2002 11:32:38 -0700
On Wed, Oct 16, 2002 at 10:40:59AM +0200, Yaniv Kaul wrote:
> I can't capture traffic on already established TCP connections.
> It may have to do with other intermediate filters I have installed on my
> network adapter, but may be not.
> I'd appreciate if someone can confirm or not this.
> My configuration:
> Ethereal 0.9.7, Win2K SP-3, WinPCap 2.3, Intel Pro adapter.
> To reproduce:
> 1. Open a TCP connection.
> 2. Try to capture it (filter 'host x.y.z.w' where x.y.z.w is the destination
> IP).

I was able to see traffic on an existing connection between the machine
running Ethereal and another machine, with a filter giving the address
of the other machine, when I tried it just now:

	Ethereal 0.9.7, Win2K SP1, WinPcap 2.3, Intel EEPRO/100+