Wireshark not show inbound traffic on public IP server

Hi to all, I've a problem on a server online. the server is a windows platform, Public IP on the nic. Naked. no limitations. I've installed Wireshark portable and i'm trying to catch the inbound traffic. I don't receive nothing. I mean, if i ping the server from my home, and filter about icmp there's are no requests, the ping is naturally working and receive packets. Am i wrong something? I don't understand the issue. Can I eventually create a filter for catching only incoming traffic? is there a way? Thank you.

The "portable" version of Wireshark isn't the best choice for capturing traffic as it doesn't include the capture library used on Windows called npcap, instead you would have to install it manually yourself from the npcap website.

Assuming you haven't installed npcap you're probably not capturing on the Ethernet interface that the traffic you're looking for is passing through.

23.8k

grahamb

answered 2021-07-18 21:33:21 +0000

edit flag offensive 0 remove flag delete link

Comments

as it doesn't include the capture library used on Windows called npcap

And if it did include Npcap, in order to capture traffic, it would require a networking device driver that's part of Npcap. That driver runs in "kernel mode", which I think may require installing it on your machine, rather than loading it from the storage device containing Wireshark - which, as I understand it, is something that "portable" applications are not supposed to do.

Guy Harris (2021-07-19 03:46:30 +0000) edit

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Wireshark not show inbound traffic on public IP server edit

Comments

1 Answer

Comments