[Wireshark-users] Strange packet nbns

2007-02-18 Thread Jon Knight
Hi all Hope you can help. I tried Wireshark on my network and once a winxp client logs into my network (Win 2003 server as DC) I see NBNS name query nb bps-ntserver1 The bps-ntserver1 was an old NT 4 server but I have since built a new domain. I have a feeling a reg key or something is

[Wireshark-users] Listening on Port mirrored interface

2007-02-18 Thread William Murphy
Hi All, Don't know if this is the correct board to put this too but hear goes anyway. I am having problems listening for packets on my Sun Machine. I have a F5 BIGIP switch on which I mirrored the traffic port(i.e.9) to another port 16 for listening and tracing. In port 16 bi run a

Re: [Wireshark-users] Listening on Port mirrored interface

2007-02-18 Thread Luis Ontanon
What about tcpdump, does it capture? What happen if you run it as root, can you capture? is /dev/ifname readable by the user you are trying to capture with? On 2/18/07, William Murphy [EMAIL PROTECTED] wrote: Hi All, Don't know if this is the correct board to put this too but hear goes

Re: [Wireshark-users] Listening on Port mirrored interface

2007-02-18 Thread William Murphy
Hi , Thanks for getting back to metcpdump does not capture eitheri have been reading up on this and here it is. The laptop I use is not as secure as Sun server and the nic card can be turned into promiscuous mode easily by software, But on the Sun server I don't think the software can

Re: [Wireshark-users] Listening on Port mirrored interface

2007-02-18 Thread William Murphy
Hi I cant seem to snoop as root. Makes no difference. [EMAIL PROTECTED] # ls -la /dev/ce lrwxrwxrwx 1 root root 28 May 14 2006 /dev/ce - ../devices/pseudo/[EMAIL PROTECTED]:ce [EMAIL PROTECTED] # ls -la ../devices/pseudo/[EMAIL PROTECTED]:ce crw--- 1 root sys 11,

Re: [Wireshark-users] Strange packet nbns

2007-02-18 Thread Hans Nilsson
Have you tried doing a search in the registry for ntserver1 or similar? On Sun, 18 Feb 2007 20:25:40 +1100, Jon Knight [EMAIL PROTECTED] said: Hi all Hope you can help. I tried Wireshark on my network and once a winxp client logs into my network (Win 2003 server as DC) I see NBNS name

Re: [Wireshark-users] Listening on Port mirrored interface

2007-02-18 Thread Luis Ontanon
http://docs.sun.com/app/docs/doc/817-3947/6mjgnrl80?a=view says that ce does actually support promiscuous mode. You might have to change something in /kernel/drv/ce.conf but honestly I do not knopw what. Luis On 2/18/07, William Murphy [EMAIL PROTECTED] wrote: Supposedlyi have tried

Re: [Wireshark-users] Strange packet nbns

2007-02-18 Thread Bill Meier
On Sun, 18 Feb 2007 20:25:40 +1100, Jon Knight [EMAIL PROTECTED] said: Hi all Hope you can help. I tried Wireshark on my network and once a winxp client logs into my network (Win 2003 server as DC) I see NBNS name query nb bps-ntserver1 The following thread may (or may