THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question

Revision history  [back]

Revision 1
grahamb's avatar
23.8k
grahamb
answered 2021-05-05 11:47:43 +0000

To determine inbound traffic you should disable promiscuous mode as that allows traffic that wouldn't normally be accepted by the interface to be processed. This is done from the Capture Options dialog.

To determine inbound traffic, set a display filter to only show traffic with a destination of your interface(s) MAC addresses(es), e.g.

eth.dst == 00:11:22:33:44:55

substituting the appropriate value for your NIC MAC.