I have found that on two other platforms (Linux and Mac OSX, so really ONE
other platform) that if I abnormally terminate Ethereal, when I run it later
I miss packets. But I mean a LOT of packets. A reboot helps that one out.
YMMV on W2K...
On 6/21/02 10:37 AM, "Robert Perez" <rperez@xxxxxxx> wrote:
>
> I have a wierd problem. I have a windows 2000 pro wks and when I do some
> sniffing on my second nic I find that there are packets missing. For ex: I
> have a PDC that acts as a WINS server, It is on a Catalyst 3548 and the port
> is spanned to my sniffer port (My desktop has a second NIC connected to the
> SPanned port) so I capture all traffic. From my workstation, I send a WINS
> request and I never see the packet return to my box in the ethereal sniff
> although from a linux box on the switch that my box is connected to I am
> also spanning that port and TCPDUMP sees the conversation from the WINS
> server respond to me but Ethereal never picked up the return packet in the
> sniff on the switch that the WINSD server is on?? So I started sniffing on
> my other NIC in my box and for all the traffic that comes in and leaves my
> machine and I caught all the packets in the sniff but I do not understand
> why Ethereal is missing packets when I sniff from the second card on the
> other end where the PDC is??
>
>
> Bob Perez
> EPX Network Support
> Phone- 302-326-0700 x4242
> Cell - 302-420-6883
> | |
> ||| |||
> ||||| |||||
> ..... |||||||.......|||||||.....
> Cisco Systems
>
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>