Ethereal-dev: Re: [Ethereal-dev] Strange Ethereal behaviour.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Gilbert Ramirez <gram@xxxxxxxxxxxxxxx>
Date: Tue, 07 Oct 2003 21:32:45 -0000
On Tue, 2003-10-07 at 15:20, Tadeusz Kelm wrote:
> Hi.
> 
> When I tried to start capture pockets, program hangs for a while (about 1-2
> min.) and sends broadcast (NBNS name query) and DNS query with ETHERXXXX?!!!!!
> question.
> Where "?" is every letter from A to Z and number 0 to 9 (totaly 327 pockets
> including DNS answers) . "!!!!!" is a 5 digit number and it differs in every
> capture try.
> 
> What is going on and how to get rid of it?
> 
> Ethereal 0.9.14 is running under Win98SE OS with WinPcap 3.0.
> 

That looks like the randomly-created name of the temporary file that
ethereal uses for saving captured packets. For example, on Linux
ethereal created for me: /tmp/etherXXXXXuR3H1

That would be an odd thing to be in a DNS query. 

When that's happening, can you look in your temp directory (I have no
idea where that is on a Win98SE machine) and see if the temporary
filename corresponds to the name in the DNS query?

--gilbert