First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

Are we guaranteed that displayed packets are actually transmitted?

  • retag add tags

If I can see outgoing (UDP) packets captured in Wireshark, can I be sure that they are actually going out? Discussion of checksum handling suggests to me that packets can be captured (and displayed) before they actually go out on the local machine's Ethernet device. Backstory: I have a driver on my Windows machine that broadcasts UDP packets. I want to receive them on another local machine. I can see the outgoing UDP packets on the broadcasting machine in WireShark, but no other machine on the LAN can see them (in WireShark). As a test, I've also tried sending UDP packets via PacketSender, but there's no difference: my other machine cannot see any of these packets. Thanks!

TheOtherPatRogers's avatar
1
TheOtherPatRogers
asked 2023-11-13 01:37:52 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

If you want to know what's on the "wire" (including wi-fi), you need to capture on the wire.

The drawbacks of local packet captures

The Network Packet Capture Playbook

See mirror ports and taps on Wireshark wiki: Ethernet capture setup

Chuckc's avatar
3k
Chuckc
answered 2023-11-13 02:42:48 +0000, updated 2023-11-13 02:43:31 +0000
edit flag offensive 0 remove flag delete link

Comments

Thanks for those links. From what I can see from them, doing my local capture will be imprecise but OK because I am only trying to find out why the packets are not apparently received elsewhere, as opposed to detailed analysis of the packet content.

TheOtherPatRogers's avatar TheOtherPatRogers (2023-11-13 19:26:07 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer