First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

Why does host receive IP packets not meant for this host?

We ran a wireshark trace on a windows computer for a short period. In the wireshark trace we see IP packets which are not meant for this computer. The source IP and dest IP does not match the computers IP address. Also when we check the mac addresses of these IP packets, then the source and dest MAC also do not match the computers mac address. The messages are also unicast messages (so not broadcast messages). We use decent switches (cisco SG350X) and have not enabled things like port mirroring. So i would expect that the computer with wireshark should only receive IP packets meant for this computer and not packet for other computers.

What can be the reason for receiving other IP packets?

vkd's avatar
1
vkd
asked 2019-11-06 02:28:26 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

You could tell Wireshark not to capture in promiscuous but that won't stop the packets from being sent by the switch. This seems to be an issue with your switch not Wireshark. The answers below might be a good starting point: https://osqa-ask.wireshark.org/questi...

Chuckc's avatar
3k
Chuckc
answered 2019-11-06 04:08:29 +0000
edit flag offensive 0 remove flag delete link
more

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer