locked
Filters don't work RRS feed

  • Question

  • Hi guru!

    I can NOT capture packets (for example from results of the command ping 10.78.13.1, runned on PC 10.70.5.95) if run

    netsh trace start persistent=yes capture=yes tracefile=c:\3.etl ipv4.sourceaddress=(10.70.0.0-10.70.255.255) ipv4.destinationaddress=!(10.70.0.0-10.70.255.255) maxsize=500

    And after the running of the command
    netsh trace start persistent=yes capture=yes tracefile=c:\3.etl ipv4.sourceaddress=(10.70.0.0-10.70.255.255) maxsize=500

    I get the ICMP requests from 10.70.5.95 to 10.78.13.1 AND (!) the their replies from 10.78.13.1 to 10.70.5.95.

    Why? What’s wrong? Help please!
    Wednesday, November 23, 2016 8:48 AM