THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.

Revision history  [back]

Does wireshark hide packets?

Hello team,

with ERSPAN [one ERSPAN session], if the packet is captured twice on the same switch, ingress and egress, I trust both should be sent to the ERSPAN destination [which is windows with wireshark].

I see the packet only one time, could it be the wireshark is hiding packet to avoid duplicate? is there a way to show it?