Ethereal-users: Re: [Ethereal-users] finding machine that send broadcasts

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Tue, 10 Dec 2002 11:03:16 -0800
On Tue, Dec 10, 2002 at 04:42:21PM +0100, S. Ancelot wrote:
> I would like to use ethereal to find which machine sends broadcasts on 
> my network,
> how to do that with ethereal ?

Well, one way to do that might be to do a capture with Ethereal using
the capture filter "broadcast"; when you stop the capture, it should
show you all the broadcast packets on the network.

You'd then have to look at the link-layer and network-layer addresses in
those packets to see what machines are sending the broadcasts;
translating those addresses to actual pieces of hardware may be harder,
and there's not much Ethereal can do about that (at most, it can try to
look up the link-layer addresses and tell you the names for those
addresses, or the probable vendors of the machines or their networking
cards, and try to look up the network-layer addresses and tell you the
names for those addresses).