UDP数据包未由Wireshark捕获，但由UDP应用程序捕获 [英] UDP Packet not captured by Wireshark, but is captured by UDP application

问题描述

我有一个经过设计和运行的应用程序，该应用程序正在端口上接收UDP广播。该应用程序一直运行良好，但是我想将应用程序接收到的数据包与Wireshark捕获进行比较。我试图确保以最小的数据丢失捕获尽可能多的数据包。

I have an application that is designed and working that is receiving UDP broadcasts on a port. The application has been working just fine, but I have wanted to compare the packets received by the application with a Wireshark capture. I'm trying to make sure that I'm capturing as many of the packets as possible with minimal data loss.

我最初以为我会运行Wireshark并进行比较针对我们应用程序中显示的数据包捕获的原始数据包。但是，当我运行Wireshark时，永远不会在该端口的IP层捕获数据包。我看到了来自服务器的其他流量，但从未看到该特定端口的Wireshare数据包。

I initially thought that I'd run Wireshark and compare the raw packets captured against the packets shown in our application. However, when I run Wireshark, the packets are never captured at the IP layer for that port. I see other traffic from the server, but I never see Wireshare packets for this specific port.

应用程序将继续捕获数据。当我查看IP src / dest字段时，src看起来是正确的10.12.10.42，但是目标IP地址是0.0.0.0。我本来希望目标地址类似于255.255.255.255。

The application continues to capture the data just fine. When I look at the IP src/dest fields, the src looks correct, 10.12.10.42, however the destination IP address is 0.0.0.0. I would have expected something like 255.255.255.255 instead for the destination address.

我无法访问正在广播数据的应用程序，但是我确实写了一个快速样本UDP广播器和接收器，以确保我的期望是正确的。

I don't have access to the application that is broadcasting the data, but I did write a quick sample UDP broadcaster and receiver to make sure I my expectations were correct. the sample application worked as expected.

关于为什么应用程序会接收UDP广播但未在Wireshark捕获中显示任何想法的任何想法？ Wireshark是否会忽略诸如0.0.0.0之类的地址，而不是全部捕获？

Any ideas on why a UDP broadcast would be received by an application, but not show up in a Wireshark capture? Does Wireshark ignore an address like 0.0.0.0 and not capture it all?

推荐答案

Wireshark仅捕获正在通过网络的以太网帧。您正在监听的界面。因此，目的地为环回地址的数据包不会被捕获。我会检查您计算机的路由表，以查看数据包的实际去向。

Wireshark only captures Ethernet frames that are going through an interface you are listening on. Thus, packets destined on loopback addresses are not captured. I would check your machine's routing tables to see where packets are actually going.

这篇关于UDP数据包未由Wireshark捕获，但由UDP应用程序捕获的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！