Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

A server cannot ping to other servers unless a wireshark is capturing packet. And I believe that a process is capturing packets before ping process. But how to find this process?

share|improve this question

migrated from stackoverflow.com Sep 7 '12 at 11:32

This question came from our site for professional and enthusiast programmers.

    
You mean you cannot ping the remote server unless the remote server has a packet capturing software running? In this case my bet would be a firewall that drops ICMP packets on the target. Please be more specific in your question. Log in to SuperUser with your StackExchange account to regain access to the question and edit it accordingly. –  Baarn Sep 7 '12 at 11:41
add comment

1 Answer 1

up vote 1 down vote accepted

OK. I solve this problem myself. The truth is that the packet send to my server has a correct IP address but a wrong MAC address. So in case the wiredshark is turned off, the network interface card(NIC) will drop it directly. But if the wiredshark is turned on, it will capture the packet and modified the MAC address to a correct one.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.