view dropped packets

2017-05-25

Question

_{Thursday, May 25, 2017 3:43 PM}

i have an issue with jumbo frames from a 2012r23 vm guest using iscsi initiator to an IP appliance.

where do i view dropped packets?

All replies (3)

_{Friday, May 26, 2017 3:09 AM}

Hi JonDoe321,

>>where do i view dropped packets?

You could use Network Monitor to view dropped packets.

This is the download link:

https://www.microsoft.com/en-sg/download/details.aspx?id=4865

Best Regards,

Candy

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Friday, May 26, 2017 3:13 AM}

Network Monitor isn't always clear on which packets have been dropped. You can configure Windows Firewall to log dropped packets (from Windows Firewall with Advanced Security, I don't remember the exact steps).

If you log dropped packets, you can view the log it creates in C:\Windows\System32\LogFiles\Firewall

One very common reason for dropped packets is stealth mode - the Windows Filtering Platform (which can't be turned off) automatically drops packets if nothing is listening on the destination port - and Network Monitor isn't always clear that this has happened in my experience (I think this is because the Windows Filtering Platform comes 'later' in the network stack...)

But yes - get it. It's a very valuable tool in cases like this.

_{Wednesday, May 31, 2017 7:54 AM}

Hi JonDoe321，

Just checking in to see if the information provided was helpful.

Please let us know if you would like further assistance.