Wireshark-users: Re: [Wireshark-users] Lost packets can not ping my machine on mynetwork

From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Wed, 11 Oct 2006 21:05:06 -0700
On Mon, Oct 09, 2006 at 02:22:28PM +0100, wrote:

> But I do not know how to read the info & from what machine to what .. 
> I pinged M2 to M1 and saw some bad check sums ?? I really need some 
> help with this so I can attempt to solve this

> Yes I have installed Wireshark/Ethereal on M1,M2+M3 ...I Pinged M1 
> from M2 .. but I am a little overwhelmed at all the info ... I have 
> sent you snap shot of the files that M2 received after pinging M1 and 
> that M1 received after being pinged from M2 ..I also pinged M2 from M1 
> on the order stated... I hope you do not mind and that you might be 
> able to help me track this problem down I tried to cut and paste this 
> info but it is not at all legible

Thanks for attaching the capture files so I can view them in easily in 
Wireshark :) and sorry for the delay in getting back to you.  Don't 
worry about the bad checksums, those are on TCP packets that we aren't 
concerned about in this ping issue.  To make it easier to troubleshoot 
this issue, type "icmp" and hit enter in the Filter field in the top of 
Wireshark so it shows only icmp (ping) traffic.  Then you can more 
easily see that the captures show the 5 ping requests 
leaving 192.168.1.100 and entering 192.168.1.64 and .64 does not send 
out a response.  Which IP belongs to M1 and which to M2?


Steve