>I'm used Ethereal 0.10.8, when capture Data from my network I observed some packet with
>erroneous data, in effect, observe this:
(...)
>The source is 00:40:96:30:5c:b1 with a IP Address 10.11.1.19
>The source is 00:40:96:30:5c:b1 with a IP Address 10.11.1.226; in effect, this is the right
>address for this MAC!.
>It's a Bug, exist a fix for this?
Hi,
It is better if you send text e-mails with pictures as attachments, in that way they
can be read by anyone without problems.
Ethereal should only conclude the relationship between those two addresses from an
earlier packet, so maybe there is something incorrect in your configuration -e.g. the
machine having two IPs, answering wrongly to ARPs, etc.-. If you send the complete trace
I can have a look at it and try to find out whether this is an error.
By the complete trace, I mean from the moment you start ethereal to the moment the packet
appears. What I mean is , if you start a capture, stop it, start a new one and
then the wrong translation appears, it's possible that the wrong translation was learnt
from the first capture, and then it will be impossible to know why looking only at the second. For instance, if you have ethereal running for a week, and along that week you change the IP
of a host, you'll probably have a problem like the one you are seeing.
Regards,
Francisco