Clever Geek Handbook

Wireshark does not show outgoing traffic

For some reason, when I open wireshark, it only displays incoming packets (and broadcasts), but not a single outgoing traffic. I have searched on google and there was something about interfering software, but none of them are active on my computer.

Does anyone know why this is happening and how to fix it?

+3


source to share


3 answers


If you have a DNE Lightweight filter listed in the properties of your network adapter, clear the checkbox.



+8


source


On Windows, Wi-Fi device drivers often use promiscuous mode; One form of abuse is refusing to display outgoing packets.

Plus, promiscuous mode won't show you third-party traffic, so it doesn't help.



Try capturing with promiscuous mode disabled.

0


source


I tried to disable additional drivers on my adapter, but it didn't work. It turns out my problem was that I had previously installed an older version of Wireshark, and I suspect that the uninstaller was unable to clean up completely after itself.

If you've previously installed nmap for Windows or an older version of Wireshark, make sure you don't have any additional npcap / loopback adapters that might interfere.

This worked for me:

  • Remove Wireshark and npcap
  • Open Device Manager and expand the list of network adapters
  • Right click any loopback adapters and click Uninstall

Now, hopefully everything will work while reinstalling Wireshark.

0


source






More articles:


All Articles