Yes, UDP address was different than laptop's IP address. All traffic that
I've created was running between two other machines, not Ethereal machine
itself. Regarding that hub.....that's definitely a hub.....it's an 'older'
Cabletron Systems microMMAC-24E. SPARC machine is already connected to that
same hub and I can monitor all traffic passing through using Ethereal on
that station.
As you, I'm also suspicious about that PCMCIA NIC but I cannot figure out
why it's not possible to 'see' only TCP. If this NIC is not able to run in
promiscous mode I presume there would be no traffic visible at all. As I
don't know anybody who has similar configuration I can' t compare
configurations or make any additional test.
Regards,
Dundo
At 11:18 AM 5/22/00 -0500, Gilbert Ramirez wrote:
On Fri, May 19, 2000 at 05:03:52PM -0500, Dundo wrote:
>
>
>
> I've connected 'Ethereal' machine and two other machines to a hub just to
> be shure there's no switching problems. I've started Apache server and FTP
> server on one of these machines and then accessing them using another
> machine as a client I was trying to create some TCP traffic. None of these
> packets appeared. Then, I used nmap to create some TCP and UDP traffic and
> only UDP was visible. When I connect same 'Ethereal' machine to LAN (to be
> specific, Roving Analysis Port of 3COM router) I can see everything else
> except TCP.
Was the UDP to a unicast (non-broadcast, non-multicast) address that was
different than the laptop's NIC's IP address?
> It's very strange because I've already compiled Ethereal 0.8.8 on SPARC
> Solaris machine and everything runs perfectly. This machine that I have
> problems with is Gateway SOLO Notebook running RedHat 6.2 (Zoot) and it has
> 3COM Megahertz PCMCIA Ethernet adapter (Model 3CXFE575CT). I wanted to use
> this machine as a portable Network Analyzer.
What if you connect that SPARC machine to that hub. What does *it* see?
(I'm trying to figure out if it's the NIC in that laptop that won't go into
promiscous mode for some strange reason, or if the hub is really not a hub).
--gilbert
- Dundo -
--> This message has been sent on 100% recycled electrons <--