Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
BUG Npcap: icmp==3 causes pcap readers to not pick up icmp replies. #1406
I am running the version of npcap: 0.99-r7
I am running on the Windows Datacenter in Amazon:
I've also done the following:
When running wireshark to capture on the main interface with the filter:
I only see the request traffic. The reply ICMP traffic does not show up at all. I have confirmed this both with Wireshark (which uses Npcap), and with a custom program I wrote that uses the Npcap Driver as well.
Steps to Reproduce
Thanks for this very detailed bug report. I've done a test on my own system here and was unable to reproduce, but of course it's a very different system. Still, the capture filter compilation and matching should be the same for both, so I'm guessing that the problem is not related to the capture filter. To confirm and narrow down the problem, please provide the following information:
Just to clarify, I understand that this packet filter is intended to filter out ICMP Destination Unreachable messages, is that correct?