Cant see unicast frames sourced from sniffer

[commnet]

Hi, perhaps someone else has seen this phenomenon.
I am inclined to blame some one of the many microsoft critical updates. I can not see unicast traffic sent from my pc ( win2k )with sniffer onboard.
If I capture all traffic to and from my pc and then try to ping a device i see the following
the initial broadcast to get an arp entry for the destination and then the echo responses from the target.
I do not see my echo requests.
This is not a sniffer specific problem as I get the same results from observer.

Any ideas

 

[rwullems]

Sound very much like a driver problem.
The ping seems to work okay, because you do see the echo reply's, so you are actually sending out the icmp echo packets.

Don't know what type of card you are using, but try changing the drivers and read trough the Sniffer readme.txt file. Depending on your Sniffer version, there are various known driver / NIC issues. Also check wich W2K Service Pack is needed for your sniffer.

regards,
Robert