I think you will find that no software tool will allow you to find runts (or
errored frames, giants, collisions, etc). The NIC/driver will discard these
before any OS get's a look. You really would need a dedicated hardware tool
like Sniffer, that actually display these type of packets by "best effort".
BTW, a switch will no forward received runts, so if the port on the hub is
recording them, then it is somewhere on that physical link. Try changing
cables or ports to see if it goes away. (Also fixing port speeds and the
like can help)
Martin
Martin Visser
Technology Consultant - Compaq Global Services
Compaq Computer Australia
410 Concord Road
Rhodes, Sydney NSW 2138
Australia
Phone: +61-2-9022-5630
Mobile: +61-411-254-513
Fax:+61-2-9022-7001
Email:martin.visser@xxxxxxxxxx
-----Original Message-----
From: Malcolm Jackson [mailto:Malcolm.Jackson@xxxxxxxxxxxxxxxx]
Sent: Friday, 6 October 2000 10:32 PM
To: ethereal-users@xxxxxxxx
Subject: [ethereal-users] damn runts, how do I find 'em
Hi,
I've been given the task of finding the source of excessive runts on a
particular area on our switched backbone network. I can see the runts only
when I check the statistics on the port that connects the hub stack to the
switch, nowhere else.
The runts appear to be coming from the switch out to the stack of hubs, so
how do I get ethereal to capture the runts at the hub end, and would the
capture enable me to see where the runts are coming from?
I'm sorry if all this seems vague, but I'm only a dumb techie.
Any and all help greatly appreciated.
Cheers,
Mal.