[Winpcap-users] Unable to capture bidirectional traffic

[Guy Harris]

Bryan Kadzban wrote:

> In Ethereal, when I choose the "base" device (which shows up without an
> IP address assigned), I only see traffic that my machine receives.  (I
> haven't tried it while actually hooked up to any VLANs other than the
> untagged, so it may deliver packets from all VLANs, and the tags may be
> intact, I'm not sure.)  If I choose one of the other devices, I see both
> sent and received frames.

It might be that the NDIS "wraparound" of packets being sent by the 
machine is done only on the interface to which the packets are being 
handed - and the IP, etc. network stacks are handing packets to the VLAN 
device, rather than to the base device.

I've added that to the Ethereal FAQ (and the page about capturing on 
VLAN devices).  Could you take a look at the section on Windows capturing on

	http://wiki.ethereal.com/CaptureSetup/VLAN

and update it with information on the Broadcom hardware and driver 
you're using?