Wireshark doesn't show outgoing traffic
Asked Answered
C

3

5

For some reason, when I open wireshark, it only displays incoming packets (and broadcast), but there isn't a single outgoing traffic. I searched in google and there was something about interfering software, but none of them are active on my computer.

Does anyone know why does it happen and how to fix it?

Cistercian answered 3/8, 2015 at 7:13 Comment(5)
What operating system is running on your machine?Yentai
@GuyHarris Windows 7Cistercian
What type of interface are you capturing on - Ethernet, Wi-Fi, or other?Yentai
@GuyHarris Wi-Fi. Actually I chose every interface and still - no outgoing packetsCistercian
Was promiscuous mode enabled (checked) when you did the capture?Yentai
C
15

If you have "DNE Lightweight Filter" checked in your network adapter properties, uncheck it.

Copyread answered 20/4, 2016 at 18:14 Comment(3)
This worked for me. Thanks a lot. What does this do? Does disabling it have any side effects?Sarina
DNE Lightweight filter is a component used by some Cisco VPN products. If you disable it, your Cisco VPN connection may not work until you re-enable it.Copyread
This works for me... but as @J.T.Taylor says, it stops my SonicWall Global VPN client from connecting.Alhambra
B
1

I tried disabling the extra drivers on my adapter but that didn't work. Turns out my problem was that I had previously installed an older version of Wireshark and I suspect that it's uninstaller failed to fully clean up after itself.

If you've previously installed nmap for Windows or an older version of Wireshark, check that you don't have any extra npcap/loopback adapters that might be interfering.

This worked for me:

  1. Uninstall Wireshark and npcap
  2. Open the Device Manager and expand the Network adapters list
  3. Right-click any loopback adapters and click Uninstall

Now, hopefully everything works when you re-install Wireshark.

Brach answered 21/3, 2018 at 23:40 Comment(0)
Y
0

On Windows, Wi-Fi device drivers often mishandle promiscuous mode; one form of mishandling is failure to show outgoing packets.

In addition, promiscuous mode won't show you third-party traffic, so it doesn't help.

Try capturing with promiscuous mode turned off.

Yentai answered 7/8, 2015 at 20:7 Comment(1)
I've tried it and still... But then I upgraded to windows 10, installed wireshark and now it's workingCistercian

© 2022 - 2024 — McMap. All rights reserved.