Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have Wireshark started, then I ping an IP address.

But Wireshark is not picking up any packet sending to or receiving (echoing) from the destination address.

Why? Is ping "protected" from being sniffed?

share|improve this question
3  
You probably just started Wireshark on the wrong network interface. –  grawity Mar 1 '12 at 13:09
6  
It's not. Wireshark sniffs ICMP. You're doing something wrong, but we cannot guess if you give no details. –  m0skit0 Mar 1 '12 at 13:28
    
If you have started Wireshark on all network interfaces and this is Windows, then AFAIK you won't be able to capture any traffic (incl. pings) on loopback interface (127.0.0.1/8) due to the way Windows network stack works. –  whitequark Mar 1 '12 at 16:05

1 Answer 1

Make sure you aren't filtering the results
- ensure wireshark is capturing and displaying everything not just IP or TCP (ICMP is a different protocol - Ensure you are looking at the correct network interface

share|improve this answer
    
how can we check if we are filtering anything like ipv4 or ICMP (with the display filter being cleared)? –  Stack Player Apr 7 at 21:02

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.