[Gilbert Ramirez <gram@xxxxxxxxxxxxxxx>]

On Tue, 2003-10-07 at 15:20, Tadeusz Kelm wrote:
> Hi.
> 
> When I tried to start capture pockets, program hangs for a while (about 1-2
> min.) and sends broadcast (NBNS name query) and DNS query with ETHERXXXX?!!!!!
> question.
> Where "?" is every letter from A to Z and number 0 to 9 (totaly 327 pockets
> including DNS answers) . "!!!!!" is a 5 digit number and it differs in every
> capture try.
> 
> What is going on and how to get rid of it?
> 
> Ethereal 0.9.14 is running under Win98SE OS with WinPcap 3.0.
> 

That looks like the randomly-created name of the temporary file that
ethereal uses for saving captured packets. For example, on Linux
ethereal created for me: /tmp/etherXXXXXuR3H1

That would be an odd thing to be in a DNS query. 

When that's happening, can you look in your temp directory (I have no
idea where that is on a Win98SE machine) and see if the temporary
filename corresponds to the name in the DNS query?

--gilbert