tamird14
tamird14

Reputation: 501

Wireshark doesn't show outgoing traffic

For some reason, when I open wireshark, it only displays incoming packets (and broadcast), but there isn't a single outgoing traffic. I searched in google and there was something about interfering software, but none of them are active on my computer.

Does anyone know why does it happen and how to fix it?

Upvotes: 5

Views: 7673

Answers (3)

John Haire
John Haire

Reputation: 131

I tried disabling the extra drivers on my adapter but that didn't work. Turns out my problem was that I had previously installed an older version of Wireshark and I suspect that it's uninstaller failed to fully clean up after itself.

If you've previously installed nmap for Windows or an older version of Wireshark, check that you don't have any extra npcap/loopback adapters that might be interfering.

This worked for me:

  1. Uninstall Wireshark and npcap
  2. Open the Device Manager and expand the Network adapters list
  3. Right-click any loopback adapters and click Uninstall

Now, hopefully everything works when you re-install Wireshark.

Upvotes: 1

J.T. Taylor
J.T. Taylor

Reputation: 4277

If you have "DNE Lightweight Filter" checked in your network adapter properties, uncheck it.

Upvotes: 15

user862787
user862787

Reputation:

On Windows, Wi-Fi device drivers often mishandle promiscuous mode; one form of mishandling is failure to show outgoing packets.

In addition, promiscuous mode won't show you third-party traffic, so it doesn't help.

Try capturing with promiscuous mode turned off.

Upvotes: 0

Related Questions