Ethereal-dev: Re: [Ethereal-dev] Strange Ethereal behaviour.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Tadeusz Kelm" <Tadeusz.Kelm@xxxxxxx>
Date: Wed, 8 Oct 2003 11:46:47 +0200
From: "Gilbert Ramirez" <gram@xxxxxxxxxxxxxxx>

On Tue, 2003-10-07 at 15:20, Tadeusz Kelm wrote:
> When I tried to start capture pockets, program hangs for a while (about 1-2
> min.) and sends broadcast (NBNS name query) and DNS query with ETHERXXXX?!!!!!
> question.
> Where "?" is every letter from A to Z and number 0 to 9 (totaly 327 pockets
> including DNS answers) . "!!!!!" is a 5 digit number and it differs in every
> capture try.

That looks like the randomly-created name of the temporary file that
ethereal uses for saving captured packets. For example, on Linux
ethereal created for me: /tmp/etherXXXXXuR3H1

That would be an odd thing to be in a DNS query.

When that's happening, can you look in your temp directory (I have no
idea where that is on a Win98SE machine) and see if the temporary
filename corresponds to the name in the DNS query?
--------------------------------------------

I found that I got wrong set of TEMP file at DOS enviroment.
In autoexec.bat variable TEMP was set on non existing directory.
Now everything runs fine.

Thanks again for a tip.

Tadeusz Kelm