Ethereal-users: Re: [Ethereal-users] Package identification

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 11 Nov 2004 10:38:23 -0800
Craig Wicker wrote:
Devices on the network will advertise themselves by broadcasting to that segments broadcast address; in this example a device having an address of 10.10.10.11 is broadcast to 10.10.10.255 so that all devices on this network segment will know it is 'alive'. Additional information is included, such as: is this device a server or workstation; is this device the 'Master Browser'; what is operating system; etc.etc.

Yes, but those should be dissected by Ethereal as browser packets, not as SMB Mailslot packets. Either there's a bug in Ethereal, or those packets *aren't* browser packets (or packets for any other protocol known by Ethereal), or perhaps the packets were captured with a "snapshot length" that caused the part that identifies the protocol being used (the mailslot name) not to be captured, or a non-standard mailslot name is being used for the browser packets.