Re: [Wireshark-users] Understanding what I'm seeing

2007-10-10 Thread Randy . Grein
verify I get the syntax right. Randy Grein Network Engineer 206-442-5329 Cell 206-947-8226 "Giles Coochey" <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 10/10/2007 07:58 AM Please respond to Community support list for Wireshark To "Community support list for Wiresha

Re: [Wireshark-users] Understanding what I'm seeing

2007-10-10 Thread Randy . Grein
h9SA94kasC&pg=PA328&lpg=PA328&dq=port+monitor+cisco+3560&source=web&ots=ZK2JCo6gfB&sig=r8_mVVz8aNciDd4cpvNYlKcuLdY or go to the official documentation: http://www.cisco.com/warp/public/473/41.html Randy Grein Network Engineer Chad Webb <[EMAIL PROTECTED]> Sent b

Re: [Wireshark-users] Initial Window Question

2007-09-26 Thread Randy . Grein
This is normal Windows behavior. There are registry changes you can make to coax it into using larger bursts, but you'll have to set it on all windows machines connecting to this server. Are you trying to fix a problem like poor performance? Randy Grein Network Engineer Becky Vict &l

Re: [Wireshark-users] Low Level Ethernet Debugging

2007-07-25 Thread Randy . Grein
ss all the errrors up the stack. It's been a major problem with software based analyzers in the Windows world. Randy Grein Network Engineer "Benatar, Naisan" <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 07/25/2007 04:06 AM Please respond to Community support list for Wi

Re: [Wireshark-users] Beginner

2007-07-13 Thread Randy . Grein
se these with other titles as a set - I bought the Master Library a couple of years ago, and even as an out of pocket professional purchase I've never regretted it. I can't think of a better resource if you're serious about getting into network analysis. Randy Grein Network Engin

Re: [Wireshark-users] Tons of ARP packets...?

2007-07-11 Thread Randy . Grein
Guy, As you suspected Comcast Cable is a shared medium. ARP traffic is high as there are multiple class C subnets on the network; it was an interesting little tidbit I discovered when I migrated to it. It's surprising the first time you see it, but it does work fairly well. Randy

Re: [Wireshark-users] Wireshark conference

2007-07-02 Thread Randy . Grein
Great list James. Add to it sniffing for intrusions and malware... Randy Grein Network Engineer "Small, James" <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 06/29/2007 05:08 PM Please respond to Community support list for Wireshark To "Community support list for Wires

Re: [Wireshark-users] Packet Capture & Personal Firewalls

2007-07-02 Thread Randy . Grein
h the firewall. Randy Grein Network Engineer "Keith French" <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 06/29/2007 01:58 PM Please respond to Community support list for Wireshark To "Community support list for Wireshark" cc Subject Re: [Wireshark-users] Packet

Re: [Wireshark-users] Newbie question about capture point

2007-06-29 Thread Randy . Grein
s these days a hardware analyzer is probably best. Randy Grein Network Engineer "Gianluca Varenni" <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 06/29/2007 08:51 AM Please respond to Community support list for Wireshark To "Community support list for Wireshark"

Re: [Wireshark-users] Newbie question about capture point

2007-06-29 Thread Randy . Grein
sions in a hub environment - but in that case it doesn't matter what the drivers do, and you're stuck in any OS. Some commercial protocol analyzer vendors supply a custom driver for a few cards, or even a custom card and driver that will capture all error packets. Randy Grein Network Eng

Re: [Wireshark-users] Packet Capture & Personal Firewalls

2007-06-29 Thread Randy . Grein
home. Randy Grein Network Engineer "Keith French" <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 06/28/2007 08:27 AM Please respond to Community support list for Wireshark To "Wireshark-Users" cc Subject [Wireshark-users] Packet Capture & Personal Firewalls

Re: [Wireshark-users] TCP Dup Ack

2007-06-05 Thread Randy . Grein
this with, IIRC What's Up! Gold (to trace the connection to the VOIP services at the other end), comparing with traceroute at the same time. When we brought in another carrier they admitted they could upgrade our class of service, just that it would cost more. Randy Grein Network Engineer

Re: [Wireshark-users] question on seeing the vlan tags on linux

2007-05-24 Thread Randy . Grein
Third situation, and most likely is that the switch itself is stripping VLAN tagging. Check with the switch vendor on how to pass this through; you're likely to have to set the Dell NIC to the relevant VLANs. Randy Grein Network Engineer "Mike Landman" <[EMAIL PROTECTED]

Re: [Wireshark-users] Appletalk PCAP example needed

2007-04-27 Thread Randy . Grein
Um, what do you mean by 'typical'? Are you looking for original Appletalk, Appletalk over ethernet, or Appletalk over IP? Randy Grein Network Engineer blue caddy <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 04/27/2007 07:02 AM Please respond to Community support list for

Re: [Wireshark-users] Wireshark

2007-04-20 Thread Randy . Grein
Probably the update then; I'm sure it's of the same high quality. Randy Grein Network Engineer Stephen Fisher <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 04/20/2007 03:20 PM Please respond to Community support list for Wireshark To Community support list for Wireshark

Re: [Wireshark-users] Wireshark

2007-04-20 Thread Randy . Grein
analysis. Randy Grein Network Engineer "Kaushal Shriyan" <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 04/19/2007 08:39 PM Please respond to Community support list for Wireshark To "Community support list for Wireshark" cc Subject Re: [Wireshark-users] Wiresha

Re: [Wireshark-users] Wireshark

2007-04-19 Thread Randy . Grein
itten on using ethereal, the direct predecessor of Wireshark - check the website for more information. Randy Grein Network Engineer "Kaushal Shriyan" <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 04/19/2007 12:08 PM Please respond to Community support list for Wireshark

Re: [Wireshark-users] Can This Be Done?

2007-04-13 Thread Randy . Grein
this configuration just won't work. Given the price of gigabit adapters and ports it makes sense to upgrade your Wireshark PC. Randy Grein Network Engineer "Tennis Smith" <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 04/13/2007 01:39 PM Please respond to Community