Ethereal-dev: Re: [Ethereal-dev] Strange Ethereal behaviour.
From: "Gilbert Ramirez" <gram@xxxxxxxxxxxxxxx>: 7 października 2003 23:32
> When I tried to start capture pockets, program hangs for a while (about 1-2
> min.) and sends broadcast (NBNS name query) and DNS query with ETHERXXXX?!!!!!
> question.
> Where "?" is every letter from A to Z and number 0 to 9 (totaly 327 pockets
> including DNS answers) . "!!!!!" is a 5 digit number and it differs in every
> capture try.
That looks like the randomly-created name of the temporary file that
ethereal uses for saving captured packets. For example, on Linux
ethereal created for me: /tmp/etherXXXXXuR3H1
That would be an odd thing to be in a DNS query.
When that's happening, can you look in your temp directory (I have no
idea where that is on a Win98SE machine) and see if the temporary
filename corresponds to the name in the DNS query?
------------------------------
Thanks for a tip. It seems that Ethereal looking for temp directory. After loop
with NBNS and DNS query it opens a file in root directory with "tmp" prefix
(for example tmpetherXXXXX61691). It used to open temporary files in
\windows\tmp\ directory before. I don't know what happens.
TK
