Ethereal-users: Re: [Ethereal-users] Who could i have read a capture for me?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Sake Blok <sake@xxxxxxxxxx>
Date: Thu, 9 Mar 2006 10:52:19 +0100
On Wed, Mar 08, 2006 at 03:39:18PM -0700, Robert Parker wrote:
>  
> I am a novice at ethereal and I'd like to have an expert read a capture and tell me what they got from it and how they came to their conclusions.  The capture is of a remote Workstation and I'm trying to free up as much bandwidth as possible.  How could i tell if there is excess traffic and whether or not the checksum errors should be there or not?  Also I installed ethereal on another workstation on this same network and it doesn't capture any traffic(not even a ping to it self).  Can ethereal run on the same network twice?
>  

To be able to determine what is excessive traffic and what is not, you 
need to know which applications are needed and which are not. You can 
use the conversation-list functions to sort all traffic streams on the
amount of bandwidth used. That might help you some more.

If you want any help, feel free to forward a (compressed) capture
file by e-mail so I can take a look at it and tell you my findings :)


Cheers,    Sake

PS  For the seeing and not seeing traffic, Tony has given you some useful links