(Taking the discussion back to the list) Hi, As you might have noticed Wireshark is about "the glue that holds the network together". So even though it can show Microsoft networking stuff, it's really suited for the low level networking stuff.
With that out of the way, there are basically three clases of network connecting devices: -hubs -switches -routers Hubs are dumb repeater, sending out every network packet it receives to every connected host. Switches try to be more intelligent about it and send a packet only to the correct host, if it can find out which, otherwise it acts like a hub. Routers are intended to connect different networks together, to keep all local traffic well, local. Note this still has nothing to do with MS networking. From the traces it looks like your PC's (the network hosts) are connected to a switch, because you see only the traffic addressed to the host and the broadcast traffic. Please note that a switch can hide in all kinds of devices. You're broadband router may have multiple ethernet ports, which is actually a switch intergrated into the broadband router. So either this switch is confused about the connected hosts or maybe VLAN tags are involved. Thanx, Jaap On Mon, 9 Oct 2006, David Ackie wrote: > Jaap > > Back to your question .. What do you mean by a switch ??? I have a router ?? > The node setup i.e cmd>ipconfig/all .. Node set to broadcast on M1,M2 + M3 > .. Is that what you are referring to ?? > > David > > -----Original Message----- > From: Jaap Keuter [mailto:[EMAIL PROTECTED] > Sent: 09 October 2006 17:11 > To: David Ackie > Subject: RE: [Wireshark-users] Lost packets can not ping my machine on > mynetwork > > > Hi, > > Concerning your problem. Do you have a switch in your setup? It looks like > it since I see ARP broadcasts but only responses from the capturing host. So > it seems that firewall like measures are still in place, either in the PC or > in the switch. > > Regards, > Jaap > > > > On Mon, 9 Oct 2006, David Ackie wrote: > > > > > Hi Stephen > > > > > > Thanks for your interest ... I will attempt to answer your points > > > below in Red Ps I am in the UK so we might have time differences if > > > you are in the U.S.A or other area in the world > > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] [ > > > <mailto:[EMAIL PROTECTED]> > > > mailto:[EMAIL PROTECTED] On Behalf Of Stephen > > > Fisher > > > Sent: 09 October 2006 06:29 > > > To: Community support list for Wireshark > > > Subject: Re: [Wireshark-users] Lost packets can not ping my machine > > > on mynetwork > > > > > > > > > On Sun, Oct 08, 2006 at 03:43:23PM +0100, David Ackie wrote: > > > > > > My problem is that I can not ping to M1 from M2 or M3 ??? but I can > > > Ping M1 from M1 of course -- I can Ping M2 to M3 or vis versa works > > > .. Ping M1 to M2 or M3 works as well > > > > > > I assume all three machines are on the same IP subnet? Can you make > > > connections from M2/M3 to M1 other than ping? > > > > > > Yes they are on the same IP subnet I can connect to M1,M2,M3 in any > > > combination .. I have just changed M1,s internal IP address, just > > > to see if it was an IP address problem .. But I get timed out again > > > using windows cmd ping, so the issue is I just can not ping to M1 > > > from any other machine ... I can share file/printer and access the > > > net on ALL 3 machines. > > > > > > But I do not know how to read the info & from what machine to what > > > .. I pinged M2 to M1 and saw some bad check sums ?? I really need > > > some help with this so I can attempt to solve this > > > > > > Which machine were you running Wireshark/Ethereal on when you did > > > the ping? Sometimes network cards process the checksums themselves > > > and incorrectly hand it to the operating system/network monitoring > > > software with an incorrect checksum so this may be a false alarm (or > > > may not be). Did you see the icmp echo go out of M2 and/or come in > > > to M1? It may be helpful to run Wireshark/Ethereal on both M1 and > > > M2 or M3 then ping back and forth between them. A proper ping will > > > have an echo request from source to destination then an echo reply > > > the reverse direction. > > > > > > Steve > > > > > > Yes I have installed Wireshark/Ethereal on M1,M2+M3 ...I Pinged M1 > > > from M2 .. but I am a little overwhelmed at all the info ... I have > > > sent you snap shot of the files that M2 received after pinging M1 > > > and that M1 received after being pinged from M2 ..I also pinged M2 > > > from M1 on the order stated... I hope you do not mind and that you > > > might be able to help me track this problem down I tried to cut and > > > paste this info but it is not at all legible > > > > > > David > > > > > > _______________________________________________ > > > Wireshark-users mailing list > > > [email protected] > > > <http://www.wireshark.org/mailman/listinfo/wireshark-users> > > > http://www.wireshark.org/mailman/listinfo/wireshark-users > > > > > > > > > > > > > > > > > > _______________________________________________ Wireshark-users mailing list [email protected] http://www.wireshark.org/mailman/listinfo/wireshark-users
