Ethereal-users: [Ethereal-users] RE: Ethereal-users digest, Vol 1 #476 - 12 msgs

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "Berry, Richard" <BerryR@xxxxxxxxxxxxxxxxxxx>
Date: Mon, 26 Nov 2001 09:05:34 -0600
Yeah, I finally did the same thing last week, and forgot to mention it here;
my apologies.

I was able to set up the symlink, then recompile Ethereal, which put
everything right. The only thing I can't get it to do is recognize the SNMP
libraries. It's not a major thing, so I just haven't sat down with it yet.

I haven't had any joy with the precompiled versions; it seems to work best
if I compile it locally.

FYI.

Richard Berry
LAN Engineer - Principal
"Si hoc legere scis numium eruditionis habes." 



-----Original Message-----
From: ethereal-users-request@xxxxxxxxxxxx
[mailto:ethereal-users-request@xxxxxxxxxxxx]
Sent: Saturday, November 24, 2001 12:01 PM
To: ethereal-users@xxxxxxxxxxxx
Subject: Ethereal-users digest, Vol 1 #476 - 12 msgs


Send Ethereal-users mailing list submissions to
	ethereal-users@xxxxxxxxxxxx

To subscribe or unsubscribe via the World Wide Web, visit
	http://www.ethereal.com/mailman/listinfo/ethereal-users
or, via email, send a message with subject or body 'help' to
	ethereal-users-request@xxxxxxxxxxxx

You can reach the person managing the list at
	ethereal-users-admin@xxxxxxxxxxxx

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Ethereal-users digest..."


Today's Topics:

   1. Has anyone figured out the libcrypto problem on RH 7.2? (John
Mulkerin)
   2. Problem with Windows version (Tom)
   3. RE: Has anyone figured out the libcrypto problem on RH 7.2? (Dave
Cramer)
   4. RE: Has anyone figured out the libcrypto problem on RH 7.2? (Dave
Cramer)
   5. Re: Has anyone figured out the libcrypto problem on RH 7.2? (John
Mulkerin)
   6. Re: Has anyone figured out the libcrypto problem on RH 7.2? (John
Mulkerin)
   7. Re: Slow (inefficient?) name resolution after stopping capture (Guy
Harris)
   8. Re: One question (Guy Harris)
   9. RE: Has anyone figured out the libcrypto problem on RH 7.2? (Dave
Cramer)
  10. Ethereal / WinPcap / XP / USB (bejay)
  11. Re: Ethereal / WinPcap / XP / USB (Guy Harris)
  12. Tethereal timeout? (Brenda Liu)

--__--__--

Message: 1
From: "John Mulkerin" <jmulkerin@xxxxxxxx>
To: <ethereal-users@xxxxxxxxxxxx>
Date: Fri, 23 Nov 2001 13:03:08 -0800
Subject: [Ethereal-users] Has anyone figured out the libcrypto problem on RH
7.2?

After reading all the posts especially Richard Berry's, I don't find any
resolution to the RH 7.2 problem.   I've got RH7.2 running with  ssh but
can't get ethereal to install because it needs libcrypto.so.0.   I've
installed openssl096-0.9.6-6.i386.rpm but still no libcrypto.   Has anyone
figured out how to get the libcrypto on so ethereal  will install?

Any help would be appreciated.

John




--__--__--

Message: 2
From: "Tom" <rinehart@xxxxxxxx>
To: <ethereal-users@xxxxxxxxxxxx>
Date: Fri, 23 Nov 2001 16:07:49 -0500
Subject: [Ethereal-users] Problem with Windows version

This is a multi-part message in MIME format.

------=_NextPart_000_004A_01C17438.FF52EDA0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

So of my TCP messages show as a lozenge (four sided concave charater) =
instead of a readable character.

Any one know why this is happening?

Thanks

------=_NextPart_000_004A_01C17438.FF52EDA0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2600.0" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>So of my TCP messages show as a lozenge =
(four sided=20
concave charater) instead of a readable character.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Any&nbsp;one know why this is=20
happening?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Thanks</FONT></DIV></BODY></HTML>

------=_NextPart_000_004A_01C17438.FF52EDA0--



--__--__--

Message: 3
Reply-To: <dave@xxxxxxxxxxxxx>
From: "Dave Cramer" <dave@xxxxxxxxxxxxx>
To: "'John Mulkerin'" <jmulkerin@xxxxxxxx>,
	<ethereal-users@xxxxxxxxxxxx>
Subject: RE: [Ethereal-users] Has anyone figured out the libcrypto problem
on RH 7.2?
Date: Fri, 23 Nov 2001 16:08:50 -0500
Organization: Fast Crypt

Just make a symlink from libcrypto.so.0 --> libcrypto.so.1

This is about the dumbest thing I have ever seen, but apparently the
later libraries are backwards compatible with the earlier ones and the
rpms don't automatically make the symlinks???

Dave

-----Original Message-----
From: ethereal-users-admin@xxxxxxxxxxxx
[mailto:ethereal-users-admin@xxxxxxxxxxxx] On Behalf Of John Mulkerin
Sent: Friday, November 23, 2001 4:03 PM
To: ethereal-users@xxxxxxxxxxxx
Subject: [Ethereal-users] Has anyone figured out the libcrypto problem
on RH 7.2?


After reading all the posts especially Richard Berry's, I don't find any
resolution to the RH 7.2 problem.   I've got RH7.2 running with  ssh but
can't get ethereal to install because it needs libcrypto.so.0.   I've
installed openssl096-0.9.6-6.i386.rpm but still no libcrypto.   Has
anyone
figured out how to get the libcrypto on so ethereal  will install?

Any help would be appreciated.

John



_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users




--__--__--

Message: 4
Reply-To: <dave@xxxxxxxxxxxxx>
From: "Dave Cramer" <dave@xxxxxxxxxxxxx>
To: "'John Mulkerin'" <jmulkerin@xxxxxxxx>,
	<ethereal-users@xxxxxxxxxxxx>
Subject: RE: [Ethereal-users] Has anyone figured out the libcrypto problem
on RH 7.2?
Date: Fri, 23 Nov 2001 16:30:26 -0500
Organization: Fast Crypt

So when you use the rpm use --nodeps 

Dave 

-----Original Message-----
From: ethereal-users-admin@xxxxxxxxxxxx
[mailto:ethereal-users-admin@xxxxxxxxxxxx] On Behalf Of John Mulkerin
Sent: Friday, November 23, 2001 4:03 PM
To: ethereal-users@xxxxxxxxxxxx
Subject: [Ethereal-users] Has anyone figured out the libcrypto problem
on RH 7.2?


After reading all the posts especially Richard Berry's, I don't find any
resolution to the RH 7.2 problem.   I've got RH7.2 running with  ssh but
can't get ethereal to install because it needs libcrypto.so.0.   I've
installed openssl096-0.9.6-6.i386.rpm but still no libcrypto.   Has
anyone
figured out how to get the libcrypto on so ethereal  will install?

Any help would be appreciated.

John



_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users




--__--__--

Message: 5
From: "John Mulkerin" <jmulkerin@xxxxxxxx>
To: <dave@xxxxxxxxxxxxx>
Cc: <ethereal-users@xxxxxxxxxxxx>
Subject: Re: [Ethereal-users] Has anyone figured out the libcrypto problem
on RH 7.2?
Date: Fri, 23 Nov 2001 13:51:23 -0800

Dave, great idea.    I found libcrypto.so.1 in the /usr/lib directory and
made the link there.   I can now see a libcrypto.so.0 -> libcrypto.so.1.  I
did it but that doesn't seem to solve it.  Do I need to do a ldconfig or
something?

 Thanks for the help.
John



----- Original Message -----
From: "Dave Cramer" <dave@xxxxxxxxxxxxx>
To: "'John Mulkerin'" <jmulkerin@xxxxxxxx>; <ethereal-users@xxxxxxxxxxxx>
Sent: Friday, November 23, 2001 1:08 PM
Subject: RE: [Ethereal-users] Has anyone figured out the libcrypto problem
on RH 7.2?


> Just make a symlink from libcrypto.so.0 --> libcrypto.so.1
>
> This is about the dumbest thing I have ever seen, but apparently the
> later libraries are backwards compatible with the earlier ones and the
> rpms don't automatically make the symlinks???
>
> Dave
>
> -----Original Message-----
> From: ethereal-users-admin@xxxxxxxxxxxx
> [mailto:ethereal-users-admin@xxxxxxxxxxxx] On Behalf Of John Mulkerin
> Sent: Friday, November 23, 2001 4:03 PM
> To: ethereal-users@xxxxxxxxxxxx
> Subject: [Ethereal-users] Has anyone figured out the libcrypto problem
> on RH 7.2?
>
>
> After reading all the posts especially Richard Berry's, I don't find any
> resolution to the RH 7.2 problem.   I've got RH7.2 running with  ssh but
> can't get ethereal to install because it needs libcrypto.so.0.   I've
> installed openssl096-0.9.6-6.i386.rpm but still no libcrypto.   Has
> anyone
> figured out how to get the libcrypto on so ethereal  will install?
>
> Any help would be appreciated.
>
> John
>
>
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>
>



--__--__--

Message: 6
From: "John Mulkerin" <jmulkerin@xxxxxxxx>
To: <dave@xxxxxxxxxxxxx>, <ethereal-users@xxxxxxxxxxxx>
Subject: Re: [Ethereal-users] Has anyone figured out the libcrypto problem
on RH 7.2?
Date: Fri, 23 Nov 2001 13:55:52 -0800

Dave, you're a Saint!  I works.

Thanks again for the help.

John
----- Original Message -----
From: "Dave Cramer" <dave@xxxxxxxxxxxxx>
To: "'John Mulkerin'" <jmulkerin@xxxxxxxx>; <ethereal-users@xxxxxxxxxxxx>
Sent: Friday, November 23, 2001 1:30 PM
Subject: RE: [Ethereal-users] Has anyone figured out the libcrypto problem
on RH 7.2?


> So when you use the rpm use --nodeps
>
> Dave
>
> -----Original Message-----
> From: ethereal-users-admin@xxxxxxxxxxxx
> [mailto:ethereal-users-admin@xxxxxxxxxxxx] On Behalf Of John Mulkerin
> Sent: Friday, November 23, 2001 4:03 PM
> To: ethereal-users@xxxxxxxxxxxx
> Subject: [Ethereal-users] Has anyone figured out the libcrypto problem
> on RH 7.2?
>
>
> After reading all the posts especially Richard Berry's, I don't find any
> resolution to the RH 7.2 problem.   I've got RH7.2 running with  ssh but
> can't get ethereal to install because it needs libcrypto.so.0.   I've
> installed openssl096-0.9.6-6.i386.rpm but still no libcrypto.   Has
> anyone
> figured out how to get the libcrypto on so ethereal  will install?
>
> Any help would be appreciated.
>
> John
>
>
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>
>



--__--__--

Message: 7
Date: Fri, 23 Nov 2001 14:35:14 -0800
From: Guy Harris <gharris@xxxxxxxxx>
To: Matthew and Molly Kidd <mkidd@xxxxxxxxx>
Cc: "'ethereal-users@xxxxxxxxxxxx'" <ethereal-users@xxxxxxxxxxxx>
Subject: Re: [Ethereal-users] Slow (inefficient?) name resolution after
stopping capture

On Thu, Nov 22, 2001 at 04:11:59AM -0800, Matthew and Molly Kidd wrote:
> I'm running ethereal 0.8.20 under NT

Then you run the risk of slow name resolution.

On Windows, converting IP addresses to names involves, among other
things, doing a DNS lookup and, if that fails (e.g., because the DNS
server being queried doesn't know the name corresponding to the IP
address in question), doing a NetBIOS-over-TCP name service reverse
lookup.

Unfortunately, as the NetBIOS Name Service protocol has no reverse
lookup query, that can only be done by sending a NetBIOS Name Service
"node status request" to the IP address in question, and waiting for a
reply.

If the reply comes back, the OS's IP-address-lookup code can get the
name from the reply.

If no reply comes back, the OS's IP-address-lookup code has spent a
significant amount of time waiting for the reply before giving up.

> Granted name resolution takes some time. But the sort of thing I'm looking

> at is a simple 500 packet HTTP session that involves no more than say 10 
> distinct IP addresses. I would expect that all 10 IP addresses could be 
> resolved in a couple of seconds at most based on how quickly nslookup 
> returns an answer from the LameDOS command line (well under a second).

"nslookup" does only a DNS lookup, not a NetBIOS lookup.

> My speculation is that ethereal is doing a separate name resolution for 
> each address in each packet instead of first determining the distinct set 
> of IP addresses and just doing name resolution for those.

"Instead" is the wrong word to use here.  Those are not the only
alternatives available.

Ethereal does neither of those; instead, it does a name resolution the
first time it sees an IP address, and remembers the result of the name
resolution - even if it's a negative result, i.e. even if it got back no
answer.  (This is different from determining the set of IP addresses
and, after doing that, looking them all up.)


--__--__--

Message: 8
Date: Fri, 23 Nov 2001 14:36:30 -0800
From: Guy Harris <gharris@xxxxxxxxx>
To: "Lopes, Mauricio" <mplopes@xxxxxxxxxxx>
Cc: "'ethereal-users@xxxxxxxxxxxx'" <ethereal-users@xxxxxxxxxxxx>
Subject: Re: [Ethereal-users] One question

On Thu, Nov 22, 2001 at 09:40:01AM -0500, Lopes, Mauricio wrote:
> How can I capture the traffic between my workstation and another? I just
> want see the packets that I?m sendind to and receiveing from a specific
> computer.
> Is it possible?

Yes, at least if all the traffic in question is IP traffic.  Do a
capture with a capture filter of

	host <hostname>

where <hostname> is the host name (or, if you don't know it, the IP
address) of the other computer.


--__--__--

Message: 9
Reply-To: <dave@xxxxxxxxxxxxx>
From: "Dave Cramer" <dave@xxxxxxxxxxxxx>
To: "'John Mulkerin'" <jmulkerin@xxxxxxxx>,
	<ethereal-users@xxxxxxxxxxxx>
Subject: RE: [Ethereal-users] Has anyone figured out the libcrypto problem
on RH 7.2?
Date: Fri, 23 Nov 2001 18:49:47 -0500
Organization: Fast Crypt

John,

I'm not sure about the Saint part, I can guarantee you that I had a lot
of unholy thoughts when I first debugged this problem. There is no real
official documentation on this.

FWIW ethereal should probably be recompiled with the newer libcrypto
libs and the dependancy for libcrypt.so.0 removed

Dave 

-----Original Message-----
From: ethereal-users-admin@xxxxxxxxxxxx
[mailto:ethereal-users-admin@xxxxxxxxxxxx] On Behalf Of John Mulkerin
Sent: Friday, November 23, 2001 4:56 PM
To: dave@xxxxxxxxxxxxx; ethereal-users@xxxxxxxxxxxx
Subject: Re: [Ethereal-users] Has anyone figured out the libcrypto
problem on RH 7.2?


Dave, you're a Saint!  I works.

Thanks again for the help.

John
----- Original Message -----
From: "Dave Cramer" <dave@xxxxxxxxxxxxx>
To: "'John Mulkerin'" <jmulkerin@xxxxxxxx>;
<ethereal-users@xxxxxxxxxxxx>
Sent: Friday, November 23, 2001 1:30 PM
Subject: RE: [Ethereal-users] Has anyone figured out the libcrypto
problem on RH 7.2?


> So when you use the rpm use --nodeps
>
> Dave
>
> -----Original Message-----
> From: ethereal-users-admin@xxxxxxxxxxxx 
> [mailto:ethereal-users-admin@xxxxxxxxxxxx] On Behalf Of John Mulkerin
> Sent: Friday, November 23, 2001 4:03 PM
> To: ethereal-users@xxxxxxxxxxxx
> Subject: [Ethereal-users] Has anyone figured out the libcrypto problem

> on RH 7.2?
>
>
> After reading all the posts especially Richard Berry's, I don't find
any
> resolution to the RH 7.2 problem.   I've got RH7.2 running with  ssh
but
> can't get ethereal to install because it needs libcrypto.so.0.   I've
> installed openssl096-0.9.6-6.i386.rpm but still no libcrypto.   Has
> anyone
> figured out how to get the libcrypto on so ethereal  will install?
>
> Any help would be appreciated.
>
> John
>
>
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx 
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>
>


_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users




--__--__--

Message: 10
From: "bejay" <mcdon18@xxxxxxxxxxxxxxx>
To: <ethereal-users@xxxxxxxxxxxx>
Date: Sat, 24 Nov 2001 09:15:32 -0000
Subject: [Ethereal-users] Ethereal / WinPcap / XP / USB

This is a multi-part message in MIME format.

------=_NextPart_000_0013_01C174C8.914CB850
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Folks,

Can't remember if I had this working before with this set up, but can =
somebody tell
me whether they have got something similar working.

I have XP a Cable Modem connected to the PC using the USB port. I have =
also got the beta
version of WinPcap 2.3 which should work with XP.

Ethereal works okay but no data is being picked up across the USB to the =
ISP but is okay
across the LAN?

Does anybody else have this working, - I know I have had it working in =
XP but can't remember whether I connect my Modem to the Ethernet card at =
the time.

rgds Brian

PS - I have removed and re-installed both Ethereal and WinpCap many =
times but still just sits there not collecting anything.


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.298 / Virus Database: 161 - Release Date: 13/11/2001

------=_NextPart_000_0013_01C174C8.914CB850
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2600.0" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3D"Comic Sans MS" size=3D2>Folks,</FONT></DIV>
<DIV><FONT face=3D"Comic Sans MS" size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3D"Comic Sans MS" size=3D2>Can't remember if I had this =
working=20
before with this set up, but can somebody tell</FONT></DIV>
<DIV><FONT face=3D"Comic Sans MS" size=3D2>me whether they have got =
something=20
similar working.</FONT></DIV>
<DIV><FONT face=3D"Comic Sans MS" size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3D"Comic Sans MS" size=3D2>I have XP a Cable Modem =
connected to the=20
PC using the USB port. I have also got the beta</FONT></DIV>
<DIV><FONT face=3D"Comic Sans MS" size=3D2>version of WinPcap 2.3 which =
should work=20
with XP.</FONT></DIV>
<DIV><FONT face=3D"Comic Sans MS" size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3D"Comic Sans MS" size=3D2>Ethereal works okay but no =
data is being=20
picked up across the USB to the ISP but is okay</FONT></DIV>
<DIV><FONT face=3D"Comic Sans MS" size=3D2>across the LAN?</FONT></DIV>
<DIV><FONT face=3D"Comic Sans MS" size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3D"Comic Sans MS" size=3D2>Does anybody else have this =
working, - I=20
know I have had it working in XP but can't remember whether I connect my =
Modem=20
to the Ethernet card at the time.</FONT></DIV>
<DIV><FONT face=3D"Comic Sans MS" size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3D"Comic Sans MS" size=3D2>rgds Brian</FONT></DIV>
<DIV><FONT face=3D"Comic Sans MS" size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3D"Comic Sans MS" size=3D2>PS - I have removed and =
re-installed both=20
Ethereal and WinpCap many times but still just sits there not collecting =

anything.</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3D"Comic Sans MS" size=3D2><BR>---<BR>Outgoing mail is =
certified=20
Virus Free.<BR>Checked by AVG anti-virus system (<A=20
href=3D"http://www.grisoft.com";>http://www.grisoft.com</A>).<BR>Version: =
6.0.298 /=20
Virus Database: 161 - Release Date: =
13/11/2001</FONT></DIV></BODY></HTML>

------=_NextPart_000_0013_01C174C8.914CB850--



--__--__--

Message: 11
Date: Sat, 24 Nov 2001 01:26:54 -0800
From: Guy Harris <gharris@xxxxxxxxx>
To: bejay <mcdon18@xxxxxxxxxxxxxxx>
Cc: ethereal-users@xxxxxxxxxxxx
Subject: Re: [Ethereal-users] Ethereal / WinPcap / XP / USB

On Sat, Nov 24, 2001 at 09:15:32AM -0000, bejay wrote:
> Ethereal works okay but no data is being picked up across the USB to
> the ISP but is okay across the LAN?

Note, though, that if the USB cable modem is acting as a PPP device, you
probably won't be able to capture on it; "Windows XP" is really Windows
NT 5.1, and WinPcap probably has the same problems capturing on PPP
devices in NT 5.1 that it has in NT 5.0 ("Windows 2000") or NT 4.0.

(No, I don't know how to determine if it's acting as a PPP device or not.)

If it's not acting as a PPP device, try it with WinDump; if it can't
capture the traffic, either, report this to the WinPcap developers by
sending mail to

	 winpcap@xxxxxxxxxxxxxxxxxxxxxxx


--__--__--

Message: 12
Date: Sat, 24 Nov 2001 08:29:37 -0800 (PST)
From: Brenda Liu <bhliu@xxxxxxxxxxxxxx>
To: ethereal-users@xxxxxxxxxxxx
Subject: [Ethereal-users] Tethereal timeout?

Hello,

Is there any way to configure tethereal to timeout during live capturing?
I want it to exit even if there had been no traffic on the interface.

Thanks for your help,

Brenda





--__--__--

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users


End of Ethereal-users Digest