Ethereal-users: Re: [ethereal-users] I can only capture my TCP packets:

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Thu, 27 Jul 2000 10:55:46 -0700 (PDT)
>  When I trace packets using Ethereal, I can "see" packets of various
> protocols going to and from various addresses. But, I can only see TCP
> protocol packets going to and from my on address. I can not see any TCP
> packets going to nor from any other address even though I know they are
> there(verified with another vendors product).

It works fine for me, and many other folks, on several different
operating systems.

On which OS are you running this?  And what type of network interface
(not just the type of network, but the manufacturer and model number of
the interface) are you doing the capture?

Perhaps you cannot, in fact, see *ANY* unicast packets, whether TCP or
not, going to or from any other address, due to either

	1) your OS not supporting promiscuous mode on the network card;

	2) the network card not supporting promiscuous mode.

Note that, even if promiscuous mode doesn't work, you will see
*broadcast* packets from other machines, and *multicast* packets from
other machines if the interface is set up to receive multicast packets
to the address to which the packets were sent; TCP doesn't use broadcast
or multicast, but other protocols do - do not misread this as meaning
that the problem is connected to TCP, rather than to unicast vs.
{broad,multi}cast.