Ethereal-users: RE: [Ethereal-users] Query Ethereal
Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.
From: Richard Urwin <RUrwin@xxxxxxxxxxxxx>
Date: Fri, 6 Sep 2002 10:23:14 +0100
That depends on what you mean by "bad packets" Ethereal works on the link level and above, but it depends on the network card, the network card drivers, the operating system and the capture library to provide its information. Some of these may, and probably will, "helpfully" delete malformed packets. So you will not see any problems that manifest on the physical layer (eg bad voltages, bad waveforms) You may see a subset of possible deformed packets at the link layer (eg you will probably see bad ethernet addresses, you probably wont see short packets) depending on the hardware and software that you are using. On a wireless network many configurations delete the wireless protocol from packets. You will see all other "bad" packets. Ethereal may or may not report them as bad, depending on the protocol and the type of malformation. So far as I know there is no definitive list of hardware and software that will give you the maximum subset of bad packets, but maybe individuals on the list might suggest configurations that have worked for them. Some commercial packet sniffers use bespoke hardware and software throughout. These can report a wider range of malformed packets, but they cost a lot of money. Ethereal has no impact on network congestion in itself. If you are using an ethernet switch, and directing all traffic to the ethereal port, I suppose that may have implications of some sort. (But I would expect it just to affect the etheral port, not the network as a whole.) -- Richard Urwin, Private "No 9000 series computer has ever made a mitsake or corrubiteddatatato." -----Original Message----- From: Zulfiqar Ahmed Khan [mailto:zulfiqar_ahmed@xxxxxxxxxxx] Sent: 06 September 2002 04:29 To: 'ethereal-users@xxxxxxxxxxxx' Subject: [Ethereal-users] Query Ethereal Hi, Please suggest is there any possibility, by using ethereal we can monitor problematic network interface cards (eg: generating bad packets)? Further, does it cause network congestion, if implemented on permanent basis? I will look forward to your kind reply. Thanks Regards Zulfiqar RHBBANK Malaysia This message is intended only for the use of the person(s) to whom it is addressed and may contain information that is privileged or otherwise protected from disclosure.If you are not the intended recipient you are hereby notified that any use, review, disclosure or copying of this message and the information it contains is prohibited. If you receive the message in error , please notify the sender by reply e-mail and discard all its contents. Thank You. _______________________________________________ Ethereal-users mailing list Ethereal-users@xxxxxxxxxxxx http://www.ethereal.com/mailman/listinfo/ethereal-users _____________________________________________________________________ This e-mail has been scanned for viruses by the WorldCom Internet Managed Scanning Service - powered by MessageLabs. For further information visit http://www.worldcom.com ________________________________________________________________________ This email has been scanned for all viruses by the MessageLabs SkyScan service. For more information on a proactive anti-virus service working around the clock, around the globe, visit http://www.messagelabs.com ________________________________________________________________________
- Prev by Date: RE: [Ethereal-users] Ethereal Capture Interface cannot be display ed in WinXP platform...
- Next by Date: [Ethereal-users] Network Diagram from tcpdump files
- Previous by thread: [Ethereal-users] Query Ethereal
- Next by thread: RE: [Ethereal-users] Ethereal Capture Interface cannot be display ed in WinXP platform...
- Index(es):