Ethereal-users: Re: [Ethereal-users] Wireless (Prism) Card: Only Incoming Packets?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Tue, 9 Apr 2002 02:37:28 -0700
On Wed, Apr 03, 2002 at 05:59:07AM -0800, Robinson, Eric R. wrote:
> I am only seeing INCOMING packets... no outgoing packets. If I ping
> something, I see echo REPLIES but no echo requests, etc. In short, I am only
> seeing one side of any conversation.

Ethereal is at the mercy of libpcap/WinPcap, and libpcap/WinPcap is at
the mercy of the device driver for the networking device and the
networking code in the OS.

If you're not capturing in promiscuous mode, try capturing in
promiscuous mode; some drivers might not show outgoing packets to
capture programs unless the networking device is in promiscuous mode.

If you *are* capturing in promiscuous mode, the driver might *still* not
be supplying outgoing packets to capture programs.

There's nothing we (or the WinPcap developers) can do about the driver. 
I'd suggest asking whoever supplied the driver (Microsoft, or the
networking card supplier).