This can get tricky.  You need to be on a port that sees all of the
traffic - read that as 'not a switch port'.  By definition a switch will
only show you packets destined for your computer.

If you really want to see what going on you need a hub or a managed switch
that can replicate all traffic onto a port.

Another option is to use a wireless card in promiscious mode - a mode where
you see all of the traffic.   Ethereal will do this with (I think) most
common wireless cards.

Mark Radabaugh
Amplex
(419) 720-3635

----- Original Message ----- 
From: "Pascal Losier" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, September 24, 2003 5:41 PM
Subject: RE: [smartBridges] Slow down problems


>
> Just a small question,
>
> When running ethereal, Do you run it directly on the router
> (ex.Mikrotik) or on any system connected to the router.
>
> Also does it matter if the system running ethereal is log via PPPOE ????
>
>
>
>
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Blazen Wireless
> Sent: Wednesday, September 24, 2003 6:12 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [smartBridges] Slow down problems
>
>
> HAHA well then my router has the virus I get like over 2000 arp request
> from the router in less then 20 min which I think is way out of control
> it always is asking who has what IP etc. I was told this is normal in
> order for the router to know what IP has what mac etc..
>
> ----- Original Message ----- 
> From: "Scott Damron" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Wednesday, September 24, 2003 12:15 PM
> Subject: RE: [smartBridges] Slow down problems
>
>
> A WHOLE bunch of arp requests.  If you run ethereal, you would see
> upwards of 30 or 40% ARP requests.  Some of the viruses cause ARP
> storms.
>
> Scott
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Blazen Wireless
> Sent: Wednesday, September 24, 2003 12:09 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [smartBridges] Slow down problems
>
>
> What do you mean check arp I know how to check it but what am I looking
> for??
>
>
> ----- Original Message ----- 
> From: "Scott Damron" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Wednesday, September 24, 2003 11:37 AM
> Subject: RE: [smartBridges] Slow down problems
>
>
> Check ARP.
>
> Scott
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Blazen Wireless
> Sent: Wednesday, September 24, 2003 11:17 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [smartBridges] Slow down problems
>
>
> I have done that already and there is no ICMP other then me pinging the
> radios It doesn't happen when there is no one online it only happens
> when a few close users get on and start to surf and then the far users
> have a hard time with dropped packets and slow speeds and high pings. I
> just thing I need to open up another AP closer to them and keep my
> distance down to under 5 miles. The one person having the hardest time
> is about 5.6 miles which is closer then my 7.2 mile customer who is
> doing great and pointed at the same radio APPO. It might just be this
> person is in a bad area with more interference is what I am thinking and
> I also may need to raise her ant a smidge..
>
>
> ----- Original Message ----- 
> From: <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Wednesday, September 24, 2003 11:47 AM
> Subject: Re: [smartBridges] Slow down problems
>
>
> Every time I've experienced interference (numerous times), it hasn't
> affected ping times.  From what I've seen, it usually causes lost
> packets, but not high latency.  I don't know if anyone has mentioned
> this before (I jumped in in the middle of this thread), but what you're
> describing sounds exactly like something I experienced a few weeks ago.
> I had about six users with the Welchia virus, and they were causing high
> latency all over the network.  If you haven't done it already, put a
> packet sniffer on the network, and see if you're seeing a lot of icmp
> echo traffic.
>
> Craig
>
>
> Quoting Blazen Wireless <[EMAIL PROTECTED]>:
>
> > Well maybe this is not the problem now I am back to the same issues
> > pings up to over 100ms and it seems now more with radios that never
> > had problems before I am thinking more of interference now? How many
> > of you have seen a drastic increase in SOHO wireless routers popping
> > up on your site survey tab when setting up a customer, I s**t you not
> > one the other day had 11
> that
> > all
> > said linksys or the default ssid for dlink stuff. Are those
> manufacturers
> > within spec it seems more and more are popping up and some with better
>
> > signal then my tower according to the site survey numbers in the ABO
> /ABI
> >
> >
> > ----- Original Message -----
> > From: "Scott Damron" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Wednesday, September 24, 2003 9:07 AM
> > Subject: RE: [smartBridges] Slow down problems
> >
> >
> > Actually, it does not really drop everyone down to 1meg, it just _MAY_
>
> > slow down the 11meg folks in order to respond to the 1meg person. Hope
>
> > that makes sense.
> >
> > Scott
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On Behalf Of The Wirefree
> > Network
> > Sent: Wednesday, September 24, 2003 9:08 AM
> > To: [EMAIL PROTECTED]
> > Subject: RE: [smartBridges] Slow down problems
> >
> >
> > Huh!??!?  This seems bass ackwards.  If one client associates at 1
> > Meg, it drops everyone down to that speed.  Not the other way around.
> > Weakest link theory.  If a client can not associate at 11 Meg and
> > steps it's way down to 1 Meg, then it CAN NOT be forced to connect at
> > 11 Meg. However, a client who is close in with 100% RSSI, could be
> > stepped down to 1 Meg based on some far out client.
> >
> > Sully
> >
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On Behalf Of Blazen Wireless
> > Sent: Tuesday, September 23, 2003 11:56 PM
> > To: [EMAIL PROTECTED]
> > Subject: Re: [smartBridges] Slow down problems
> >
> > I have throttling in place now thats not the issue. The issue is in my
>
> > opinion and theory is at what rate the radios associate at.. If they
> > are only associating at 1 meg or less then yes you will have
> > throughput problems, if I have all my close customers able to
> > associate at 11 megs
> > (5.5) and my furthest customers only at 1 meg ( 500kbps) then the
> > further users are not going to be able to associate at 1 meg but will
> be
> > forced to associate at 11 megs and since that is not a stable link
> they
> > will suffer as I kind of proved tonight but cant be 100% sure unless I
>
> > could verify what speed the users radios are associating at to the AP.
>
> > In theory the AP cant be associated to 3 to 4 radios all at different
> > speeds. They will be associated at the speed of the slowest radio or
> the
> > fastest depending on what radio has the best link I think?
> >
> > ----- Original Message -----
> > From: Vasu (sB Tech Team)
> > To: [EMAIL PROTECTED]
> > Sent: Tuesday, September 23, 2003 11:27 PM
> > Subject: RE: [smartBridges] Slow down problems
> >
> > That's the basics of 802.11 std, when one user hogs the entire
> > bandwidth the remaining users have to share the bandwidth, hence
> > bandwidth throttling is important to ensure good and stable links to
> > all users, I think the XO series access point should solve your
> > problem which can provide dedicated bandwidth to every user.
> >
> > Vasu
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On Behalf Of Blazen Wireless
> > Sent: Wednesday, September 24, 2003 2:02 PM
> > To: '[EMAIL PROTECTED]'
> > Subject: [smartBridges] Slow down problems
> >
> > Okay I think I have figured out the problem with my system. It seems
> > that when users are one (close users) they are associated to the APPO
> > at 5.5 to 11 megs possibly and the users that are further away are at
> > 1 meg max well if you have the near users at 11 megs tying up the
> > radio and the far uses cant connect at a slower speed for a better
> > link / speed quality then the far users suffer? am I correct in my
> > theory does that make any sense?
> >
> > So going forward we are going to have to plan some more sites closer
> > to the users having issues etc Has anyone else experienced this. I
> > cant verify 100% that this is true due to the fact the radios don't
> > report what speed they are associated at? Can someone think of a way
> > to validate this theory??
> >
> > Thanks
> >
> > Martin & Steve
> > Blazen Wireless
> > www.blazenwireless.com
> >
> >
> > ----------ANNOUNCEMENT----------
> > Don't forget to register for WISPCON IV
> > http://www.wispcon.info/us/wispcon-iv/wispcon-iv.htm
> >
> > The PART-15.ORG smartBridges Discussion List
> > To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe
> > smartBridges <yournickname> To Remove: mailto:[EMAIL PROTECTED] (in
>
> > the body type unsubscribe
> > smartBridges)
> > Archives: http://archives.part-15.org
> >
> >
> > ----------ANNOUNCEMENT----------
> > Don't forget to register for WISPCON IV
> > http://www.wispcon.info/us/wispcon-iv/wispcon-iv.htm
> >
> > The PART-15.ORG smartBridges Discussion List
> > To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe
> smartBridges
> > <yournickname>
> > To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe
> > smartBridges)
> > Archives: http://archives.part-15.org
> >
> >
>
>
> ----------ANNOUNCEMENT----------
> Don't forget to register for WISPCON IV
> http://www.wispcon.info/us/wispcon-iv/wispcon-iv.htm
>
> The PART-15.ORG smartBridges Discussion List
> To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe
> smartBridges <yournickname> To Remove: mailto:[EMAIL PROTECTED] (in
> the body type unsubscribe
> smartBridges)
> Archives: http://archives.part-15.org
>
>
> ----------ANNOUNCEMENT----------
> Don't forget to register for WISPCON IV
> http://www.wispcon.info/us/wispcon-iv/wispcon-iv.htm
>
> The PART-15.ORG smartBridges Discussion List
> To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe
> smartBridges <yournickname> To Remove: mailto:[EMAIL PROTECTED] (in
> the body type unsubscribe smartBridges)
> Archives: http://archives.part-15.org
>
>
> ----------ANNOUNCEMENT----------
> Don't forget to register for WISPCON IV
> http://www.wispcon.info/us/wispcon-iv/wispcon-iv.htm
>
> The PART-15.ORG smartBridges Discussion List
> To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe
> smartBridges <yournickname> To Remove: mailto:[EMAIL PROTECTED] (in
> the body type unsubscribe
> smartBridges)
> Archives: http://archives.part-15.org
>
>
> ----------ANNOUNCEMENT----------
> Don't forget to register for WISPCON IV
> http://www.wispcon.info/us/wispcon-iv/wispcon-iv.htm
>
> The PART-15.ORG smartBridges Discussion List
> To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe
> smartBridges <yournickname> To Remove: mailto:[EMAIL PROTECTED] (in
> the body type unsubscribe smartBridges)
> Archives: http://archives.part-15.org
>
>
> ----------ANNOUNCEMENT----------
> Don't forget to register for WISPCON IV
> http://www.wispcon.info/us/wispcon-iv/wispcon-iv.htm
>
> The PART-15.ORG smartBridges Discussion List
> To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe
> smartBridges <yournickname> To Remove: mailto:[EMAIL PROTECTED] (in
> the body type unsubscribe
> smartBridges)
> Archives: http://archives.part-15.org
>
>
> ----------ANNOUNCEMENT----------
> Don't forget to register for WISPCON IV
> http://www.wispcon.info/us/wispcon-iv/wispcon-iv.htm
>
> The PART-15.ORG smartBridges Discussion List
> To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe
> smartBridges <yournickname> To Remove: mailto:[EMAIL PROTECTED] (in
> the body type unsubscribe smartBridges)
> Archives: http://archives.part-15.org
>
>
>
>
> ----------ANNOUNCEMENT----------
> Don't forget to register for WISPCON IV
> http://www.wispcon.info/us/wispcon-iv/wispcon-iv.htm
>
> The PART-15.ORG smartBridges Discussion List
> To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe
smartBridges <yournickname>
> To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe
smartBridges)
> Archives: http://archives.part-15.org
>


----------ANNOUNCEMENT----------
Don't forget to register for WISPCON IV
http://www.wispcon.info/us/wispcon-iv/wispcon-iv.htm

The PART-15.ORG smartBridges Discussion List
To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe smartBridges 
<yournickname>
To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe smartBridges)
Archives: http://archives.part-15.org  

Reply via email to