Re: [tcpdump-workers] basic non-starter

2002-04-27 Thread Guy Harris
On Fri, Apr 26, 2002 at 10:04:35PM -0700, Harry Putnam wrote: > Hope I didn't typo earlier; the exact hub is DS108. You said "Netgear 108"; there are several Netgear hubs with "108" as the number, but some are 10Mb-only - the DS108 is the 10/100 hub. > It says it is a > dual speed hub `auto 10/

Re: [tcpdump-workers] basic non-starter

2002-04-26 Thread Harry Putnam
Guy Harris <[EMAIL PROTECTED]> writes: > Perhaps this hub is different and is a 10/100 hub; the Ethereal FAQ does > list 10/100 hubs as another source of problems when sniffing. Hope I didn't typo earlier; the exact hub is DS108. It says it is a dual speed hub `auto 10/100 Mbps'. So apparentl

Re: [tcpdump-workers] basic non-starter

2002-04-26 Thread Harry Putnam
Guy Harris <[EMAIL PROTECTED]> writes: > On Fri, Apr 26, 2002 at 06:32:34PM -0700, Harry Putnam wrote: >> So I now have >> >>Internet >> | >> dsl modem >> | >>dsl/router/switch (.1) >> | >> _NEW SIMPLE 8 port hub___

Re: [tcpdump-workers] basic non-starter

2002-04-26 Thread Guy Harris
On Fri, Apr 26, 2002 at 10:06:46PM -0400, Andrew Mann wrote: > Possibly a stab in the dark, but is it a 10/100 hub, and is one > machine using a 10 mbit card (or negotiating down to 10mbit for some > reason) and the other using 100 mbit? My experience with every 10/100 hub > I've ever

Re: [tcpdump-workers] basic non-starter

2002-04-26 Thread Andrew Mann
Possibly a stab in the dark, but is it a 10/100 hub, and is one machine using a 10 mbit card (or negotiating down to 10mbit for some reason) and the other using 100 mbit? My experience with every 10/100 hub I've ever used has been that traffic is actually switched between the 10 mbit

Re: [tcpdump-workers] basic non-starter

2002-04-26 Thread Guy Harris
On Fri, Apr 26, 2002 at 06:32:34PM -0700, Harry Putnam wrote: > So I now have > >Internet > | > dsl modem > | >dsl/router/switch (.1) > | > _NEW SIMPLE 8 port hub__ > | | || | | > mach2 m3

Re: [tcpdump-workers] basic non-starter

2002-04-26 Thread Harry Putnam
Guy Harris <[EMAIL PROTECTED]> writes: [...] >> Now fire up a browser on .7 ... and I see nothing at all. > > What happens if you just run "tcpdump" with no arguments? > >> root # tcpdump host 192.168.0.4 >> tcpdump: listening on eth0 >> 14:47:42.738413 arp who-has fw.local.lan tell satellite.l

Re: [tcpdump-workers] basic non-starter

2002-04-26 Thread Guy Harris
On Fri, Apr 26, 2002 at 02:50:46PM -0700, Harry Putnam wrote: > In that config running tcpdump on .5 like this: >root # tcpdump host 192.168.0.7 > tcpdump: listening on eth0 > > Now fire up a browser on .7 ... and I see nothing at all. What happens if you just run "tcpdump" with no argumen

Re: [tcpdump-workers] basic non-starter

2002-04-26 Thread Harry Putnam
Harry Putnam <[EMAIL PROTECTED]> writes: [...] Guy Harris wrote: >> If you're not running tcpdump on satwin.local.lan, the problem may be >> that satwin.local.lan is on a switched network or a 10/100 hub, so that >> not all traffic to and from it is seen by the machine on which you're >> running

Re: [tcpdump-workers] basic non-starter

2002-04-25 Thread Harry Putnam
Guy Harris <[EMAIL PROTECTED]> writes: > On Thu, Apr 25, 2002 at 08:34:09PM -0700, Harry Putnam wrote: >> I'll admit I'm not the sharpest tool in the shed but my feeble reading >> man tcpdump indicates that this command should show traffic on a >> specific host: >> tcpdump host 192.168.0

Re: [tcpdump-workers] basic non-starter

2002-04-25 Thread Guy Harris
On Thu, Apr 25, 2002 at 08:34:09PM -0700, Harry Putnam wrote: > I'll admit I'm not the sharpest tool in the shed but my feeble reading > man tcpdump indicates that this command should show traffic on a > specific host: > tcpdump host 192.168.0.7 > And in fact if I start a ping of the host

[tcpdump-workers] basic non-starter

2002-04-25 Thread Harry Putnam
I'll admit I'm not the sharpest tool in the shed but my feeble reading man tcpdump indicates that this command should show traffic on a specific host: tcpdump host 192.168.0.7 And in fact if I start a ping of the host from local machine 192.168.0.5 I do see the traffic. But if I slide ov