Greg,
I really do appreciate your concise view. I do glean a lot from what you share.
In this case I am dealing with "I do not have a clue?" and the mfg asked me to
use this specific app. I have it and it is now running on one of my clients.
Interesting choice of client I made. My trouble may be one of my clients. Duh!
Hours have gone by...........................
Now, I'm back at it..................
It now seems that one of my clients may be "raising a call" to my printer
via SNTP.
Do not know why, yet.
The printer is answering the call/poll. The router is recording the
printer's answer to a
legitimate call as some sort of 'intrusion.' I just do not know right
now. Based on the
date/time stamp that is what it looks like. Still watching.
In any case, I really do like this 'sniffer' app. I've seen enough in 3
hours of sniffing to
make me question my entire LAN setup! I have much to learn................ :)
Perhaps I should have never dabbled here... Right!!!
Best,
Duncan
At 16:15 11/09/2007 -0600, you wrote:
That's not entirely accurate. By default, Wireshark will attempt to capture
packets in promiscuous mode. NDIS 5.x WLAN miniports do not support this, so
you have to disable that mode. All promiscuous mode does is capture -all-
packets on the wire instead of just those addressed to the NIC's MAC
address. This mode is mostly useless in switched networks for all but
broadcast traffic anyway.
Greg
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:hardware-
> [EMAIL PROTECTED] On Behalf Of Brian Weeden
> Sent: Friday, November 09, 2007 3:28 PM
> To: The Hardware List
> Subject: Re: [H] packet sniffer
>
> Yeah it is good but only for wired lans. I was trying to use it to
> diagnose trouble with my Wi-fi network and it turns out I need to buy
> some special software to let my card sniff packets and that software
> was a few hundred bucks. Didn't investigate further, maybe there was
> a cheaper solution.
>
> On Nov 9, 2007 4:26 PM, Greg Sevart <[EMAIL PROTECTED]> wrote:
> > Wireshark (formerly known as the venerable Ethereal) is all I use. :)
> Great
> > software.
> >
> > Greg
> >
> >
> > > -----Original Message-----
> > > From: [EMAIL PROTECTED] [mailto:hardware-
> > > [EMAIL PROTECTED] On Behalf Of DHSinclair
> > > Sent: Friday, November 09, 2007 3:19 PM
> > > To: Hardware Group
> > > Subject: [H] packet sniffer
> > >
> > > Do not know how good this is, but the Brother Guru's asked me to
> use
> > > this
> > > to TS what I believe is a printer problem. The printer is
> > > hitting/logging
> > > my router's log every 11-12 minutes.
> > > The router posts an entry saying, "LAN access denied to a device
> with
> > > mac
> > > address 00....".
> > > The mac address is my printer.......... :)
> > > Anyway, thought you might like to play....... The code is at
> > > http://www.wireshark.org/
> > >
> > > hth,
> > > Duncan
> >
> >
> >
> >
>
>
>
> --
> Brian Weeden
