Ethereal-dev: Re: [Ethereal-dev] Strange Ethereal behaviour.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "Tadeusz Kelm" <Tadeusz.Kelm@xxxxxxx>
Date: Wed, 8 Oct 2003 10:08:32 +0200
From: "Gilbert Ramirez" <gram@xxxxxxxxxxxxxxx>: 7 pa�dziernika 2003 23:32

> When I tried to start capture pockets, program hangs for a while (about 1-2
> min.) and sends broadcast (NBNS name query) and DNS query with ETHERXXXX?!!!!!
> question.
> Where "?" is every letter from A to Z and number 0 to 9 (totaly 327 pockets
> including DNS answers) . "!!!!!" is a 5 digit number and it differs in every
> capture try.

That looks like the randomly-created name of the temporary file that
ethereal uses for saving captured packets. For example, on Linux
ethereal created for me: /tmp/etherXXXXXuR3H1

That would be an odd thing to be in a DNS query.

When that's happening, can you look in your temp directory (I have no
idea where that is on a Win98SE machine) and see if the temporary
filename corresponds to the name in the DNS query?
------------------------------

Thanks for a tip. It seems that Ethereal looking for temp directory. After loop
with NBNS and DNS query it opens a file in root directory with  "tmp" prefix
(for example tmpetherXXXXX61691). It used to open temporary files in
\windows\tmp\ directory before. I don't know what happens.

TK