Ethereal-users: [Ethereal-users] RE: Ethereal-users digest, Vol 1 #476 - 12 msgs
Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.
From: "Berry, Richard" <BerryR@xxxxxxxxxxxxxxxxxxx>
Date: Mon, 26 Nov 2001 09:05:34 -0600
Yeah, I finally did the same thing last week, and forgot to mention it here; my apologies. I was able to set up the symlink, then recompile Ethereal, which put everything right. The only thing I can't get it to do is recognize the SNMP libraries. It's not a major thing, so I just haven't sat down with it yet. I haven't had any joy with the precompiled versions; it seems to work best if I compile it locally. FYI. Richard Berry LAN Engineer - Principal "Si hoc legere scis numium eruditionis habes." -----Original Message----- From: ethereal-users-request@xxxxxxxxxxxx [mailto:ethereal-users-request@xxxxxxxxxxxx] Sent: Saturday, November 24, 2001 12:01 PM To: ethereal-users@xxxxxxxxxxxx Subject: Ethereal-users digest, Vol 1 #476 - 12 msgs Send Ethereal-users mailing list submissions to ethereal-users@xxxxxxxxxxxx To subscribe or unsubscribe via the World Wide Web, visit http://www.ethereal.com/mailman/listinfo/ethereal-users or, via email, send a message with subject or body 'help' to ethereal-users-request@xxxxxxxxxxxx You can reach the person managing the list at ethereal-users-admin@xxxxxxxxxxxx When replying, please edit your Subject line so it is more specific than "Re: Contents of Ethereal-users digest..." Today's Topics: 1. Has anyone figured out the libcrypto problem on RH 7.2? (John Mulkerin) 2. Problem with Windows version (Tom) 3. RE: Has anyone figured out the libcrypto problem on RH 7.2? (Dave Cramer) 4. RE: Has anyone figured out the libcrypto problem on RH 7.2? (Dave Cramer) 5. Re: Has anyone figured out the libcrypto problem on RH 7.2? (John Mulkerin) 6. Re: Has anyone figured out the libcrypto problem on RH 7.2? (John Mulkerin) 7. Re: Slow (inefficient?) name resolution after stopping capture (Guy Harris) 8. Re: One question (Guy Harris) 9. RE: Has anyone figured out the libcrypto problem on RH 7.2? (Dave Cramer) 10. Ethereal / WinPcap / XP / USB (bejay) 11. Re: Ethereal / WinPcap / XP / USB (Guy Harris) 12. Tethereal timeout? (Brenda Liu) --__--__-- Message: 1 From: "John Mulkerin" <jmulkerin@xxxxxxxx> To: <ethereal-users@xxxxxxxxxxxx> Date: Fri, 23 Nov 2001 13:03:08 -0800 Subject: [Ethereal-users] Has anyone figured out the libcrypto problem on RH 7.2? After reading all the posts especially Richard Berry's, I don't find any resolution to the RH 7.2 problem. I've got RH7.2 running with ssh but can't get ethereal to install because it needs libcrypto.so.0. I've installed openssl096-0.9.6-6.i386.rpm but still no libcrypto. Has anyone figured out how to get the libcrypto on so ethereal will install? Any help would be appreciated. John --__--__-- Message: 2 From: "Tom" <rinehart@xxxxxxxx> To: <ethereal-users@xxxxxxxxxxxx> Date: Fri, 23 Nov 2001 16:07:49 -0500 Subject: [Ethereal-users] Problem with Windows version This is a multi-part message in MIME format. ------=_NextPart_000_004A_01C17438.FF52EDA0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable So of my TCP messages show as a lozenge (four sided concave charater) = instead of a readable character. Any one know why this is happening? Thanks ------=_NextPart_000_004A_01C17438.FF52EDA0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Diso-8859-1"> <META content=3D"MSHTML 6.00.2600.0" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D#ffffff> <DIV><FONT face=3DArial size=3D2>So of my TCP messages show as a lozenge = (four sided=20 concave charater) instead of a readable character.</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>Any one know why this is=20 happening?</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>Thanks</FONT></DIV></BODY></HTML> ------=_NextPart_000_004A_01C17438.FF52EDA0-- --__--__-- Message: 3 Reply-To: <dave@xxxxxxxxxxxxx> From: "Dave Cramer" <dave@xxxxxxxxxxxxx> To: "'John Mulkerin'" <jmulkerin@xxxxxxxx>, <ethereal-users@xxxxxxxxxxxx> Subject: RE: [Ethereal-users] Has anyone figured out the libcrypto problem on RH 7.2? Date: Fri, 23 Nov 2001 16:08:50 -0500 Organization: Fast Crypt Just make a symlink from libcrypto.so.0 --> libcrypto.so.1 This is about the dumbest thing I have ever seen, but apparently the later libraries are backwards compatible with the earlier ones and the rpms don't automatically make the symlinks??? Dave -----Original Message----- From: ethereal-users-admin@xxxxxxxxxxxx [mailto:ethereal-users-admin@xxxxxxxxxxxx] On Behalf Of John Mulkerin Sent: Friday, November 23, 2001 4:03 PM To: ethereal-users@xxxxxxxxxxxx Subject: [Ethereal-users] Has anyone figured out the libcrypto problem on RH 7.2? After reading all the posts especially Richard Berry's, I don't find any resolution to the RH 7.2 problem. I've got RH7.2 running with ssh but can't get ethereal to install because it needs libcrypto.so.0. I've installed openssl096-0.9.6-6.i386.rpm but still no libcrypto. Has anyone figured out how to get the libcrypto on so ethereal will install? Any help would be appreciated. John _______________________________________________ Ethereal-users mailing list Ethereal-users@xxxxxxxxxxxx http://www.ethereal.com/mailman/listinfo/ethereal-users --__--__-- Message: 4 Reply-To: <dave@xxxxxxxxxxxxx> From: "Dave Cramer" <dave@xxxxxxxxxxxxx> To: "'John Mulkerin'" <jmulkerin@xxxxxxxx>, <ethereal-users@xxxxxxxxxxxx> Subject: RE: [Ethereal-users] Has anyone figured out the libcrypto problem on RH 7.2? Date: Fri, 23 Nov 2001 16:30:26 -0500 Organization: Fast Crypt So when you use the rpm use --nodeps Dave -----Original Message----- From: ethereal-users-admin@xxxxxxxxxxxx [mailto:ethereal-users-admin@xxxxxxxxxxxx] On Behalf Of John Mulkerin Sent: Friday, November 23, 2001 4:03 PM To: ethereal-users@xxxxxxxxxxxx Subject: [Ethereal-users] Has anyone figured out the libcrypto problem on RH 7.2? After reading all the posts especially Richard Berry's, I don't find any resolution to the RH 7.2 problem. I've got RH7.2 running with ssh but can't get ethereal to install because it needs libcrypto.so.0. I've installed openssl096-0.9.6-6.i386.rpm but still no libcrypto. Has anyone figured out how to get the libcrypto on so ethereal will install? Any help would be appreciated. John _______________________________________________ Ethereal-users mailing list Ethereal-users@xxxxxxxxxxxx http://www.ethereal.com/mailman/listinfo/ethereal-users --__--__-- Message: 5 From: "John Mulkerin" <jmulkerin@xxxxxxxx> To: <dave@xxxxxxxxxxxxx> Cc: <ethereal-users@xxxxxxxxxxxx> Subject: Re: [Ethereal-users] Has anyone figured out the libcrypto problem on RH 7.2? Date: Fri, 23 Nov 2001 13:51:23 -0800 Dave, great idea. I found libcrypto.so.1 in the /usr/lib directory and made the link there. I can now see a libcrypto.so.0 -> libcrypto.so.1. I did it but that doesn't seem to solve it. Do I need to do a ldconfig or something? Thanks for the help. John ----- Original Message ----- From: "Dave Cramer" <dave@xxxxxxxxxxxxx> To: "'John Mulkerin'" <jmulkerin@xxxxxxxx>; <ethereal-users@xxxxxxxxxxxx> Sent: Friday, November 23, 2001 1:08 PM Subject: RE: [Ethereal-users] Has anyone figured out the libcrypto problem on RH 7.2? > Just make a symlink from libcrypto.so.0 --> libcrypto.so.1 > > This is about the dumbest thing I have ever seen, but apparently the > later libraries are backwards compatible with the earlier ones and the > rpms don't automatically make the symlinks??? > > Dave > > -----Original Message----- > From: ethereal-users-admin@xxxxxxxxxxxx > [mailto:ethereal-users-admin@xxxxxxxxxxxx] On Behalf Of John Mulkerin > Sent: Friday, November 23, 2001 4:03 PM > To: ethereal-users@xxxxxxxxxxxx > Subject: [Ethereal-users] Has anyone figured out the libcrypto problem > on RH 7.2? > > > After reading all the posts especially Richard Berry's, I don't find any > resolution to the RH 7.2 problem. I've got RH7.2 running with ssh but > can't get ethereal to install because it needs libcrypto.so.0. I've > installed openssl096-0.9.6-6.i386.rpm but still no libcrypto. Has > anyone > figured out how to get the libcrypto on so ethereal will install? > > Any help would be appreciated. > > John > > > > _______________________________________________ > Ethereal-users mailing list > Ethereal-users@xxxxxxxxxxxx > http://www.ethereal.com/mailman/listinfo/ethereal-users > > --__--__-- Message: 6 From: "John Mulkerin" <jmulkerin@xxxxxxxx> To: <dave@xxxxxxxxxxxxx>, <ethereal-users@xxxxxxxxxxxx> Subject: Re: [Ethereal-users] Has anyone figured out the libcrypto problem on RH 7.2? Date: Fri, 23 Nov 2001 13:55:52 -0800 Dave, you're a Saint! I works. Thanks again for the help. John ----- Original Message ----- From: "Dave Cramer" <dave@xxxxxxxxxxxxx> To: "'John Mulkerin'" <jmulkerin@xxxxxxxx>; <ethereal-users@xxxxxxxxxxxx> Sent: Friday, November 23, 2001 1:30 PM Subject: RE: [Ethereal-users] Has anyone figured out the libcrypto problem on RH 7.2? > So when you use the rpm use --nodeps > > Dave > > -----Original Message----- > From: ethereal-users-admin@xxxxxxxxxxxx > [mailto:ethereal-users-admin@xxxxxxxxxxxx] On Behalf Of John Mulkerin > Sent: Friday, November 23, 2001 4:03 PM > To: ethereal-users@xxxxxxxxxxxx > Subject: [Ethereal-users] Has anyone figured out the libcrypto problem > on RH 7.2? > > > After reading all the posts especially Richard Berry's, I don't find any > resolution to the RH 7.2 problem. I've got RH7.2 running with ssh but > can't get ethereal to install because it needs libcrypto.so.0. I've > installed openssl096-0.9.6-6.i386.rpm but still no libcrypto. Has > anyone > figured out how to get the libcrypto on so ethereal will install? > > Any help would be appreciated. > > John > > > > _______________________________________________ > Ethereal-users mailing list > Ethereal-users@xxxxxxxxxxxx > http://www.ethereal.com/mailman/listinfo/ethereal-users > > --__--__-- Message: 7 Date: Fri, 23 Nov 2001 14:35:14 -0800 From: Guy Harris <gharris@xxxxxxxxx> To: Matthew and Molly Kidd <mkidd@xxxxxxxxx> Cc: "'ethereal-users@xxxxxxxxxxxx'" <ethereal-users@xxxxxxxxxxxx> Subject: Re: [Ethereal-users] Slow (inefficient?) name resolution after stopping capture On Thu, Nov 22, 2001 at 04:11:59AM -0800, Matthew and Molly Kidd wrote: > I'm running ethereal 0.8.20 under NT Then you run the risk of slow name resolution. On Windows, converting IP addresses to names involves, among other things, doing a DNS lookup and, if that fails (e.g., because the DNS server being queried doesn't know the name corresponding to the IP address in question), doing a NetBIOS-over-TCP name service reverse lookup. Unfortunately, as the NetBIOS Name Service protocol has no reverse lookup query, that can only be done by sending a NetBIOS Name Service "node status request" to the IP address in question, and waiting for a reply. If the reply comes back, the OS's IP-address-lookup code can get the name from the reply. If no reply comes back, the OS's IP-address-lookup code has spent a significant amount of time waiting for the reply before giving up. > Granted name resolution takes some time. But the sort of thing I'm looking > at is a simple 500 packet HTTP session that involves no more than say 10 > distinct IP addresses. I would expect that all 10 IP addresses could be > resolved in a couple of seconds at most based on how quickly nslookup > returns an answer from the LameDOS command line (well under a second). "nslookup" does only a DNS lookup, not a NetBIOS lookup. > My speculation is that ethereal is doing a separate name resolution for > each address in each packet instead of first determining the distinct set > of IP addresses and just doing name resolution for those. "Instead" is the wrong word to use here. Those are not the only alternatives available. Ethereal does neither of those; instead, it does a name resolution the first time it sees an IP address, and remembers the result of the name resolution - even if it's a negative result, i.e. even if it got back no answer. (This is different from determining the set of IP addresses and, after doing that, looking them all up.) --__--__-- Message: 8 Date: Fri, 23 Nov 2001 14:36:30 -0800 From: Guy Harris <gharris@xxxxxxxxx> To: "Lopes, Mauricio" <mplopes@xxxxxxxxxxx> Cc: "'ethereal-users@xxxxxxxxxxxx'" <ethereal-users@xxxxxxxxxxxx> Subject: Re: [Ethereal-users] One question On Thu, Nov 22, 2001 at 09:40:01AM -0500, Lopes, Mauricio wrote: > How can I capture the traffic between my workstation and another? I just > want see the packets that I?m sendind to and receiveing from a specific > computer. > Is it possible? Yes, at least if all the traffic in question is IP traffic. Do a capture with a capture filter of host <hostname> where <hostname> is the host name (or, if you don't know it, the IP address) of the other computer. --__--__-- Message: 9 Reply-To: <dave@xxxxxxxxxxxxx> From: "Dave Cramer" <dave@xxxxxxxxxxxxx> To: "'John Mulkerin'" <jmulkerin@xxxxxxxx>, <ethereal-users@xxxxxxxxxxxx> Subject: RE: [Ethereal-users] Has anyone figured out the libcrypto problem on RH 7.2? Date: Fri, 23 Nov 2001 18:49:47 -0500 Organization: Fast Crypt John, I'm not sure about the Saint part, I can guarantee you that I had a lot of unholy thoughts when I first debugged this problem. There is no real official documentation on this. FWIW ethereal should probably be recompiled with the newer libcrypto libs and the dependancy for libcrypt.so.0 removed Dave -----Original Message----- From: ethereal-users-admin@xxxxxxxxxxxx [mailto:ethereal-users-admin@xxxxxxxxxxxx] On Behalf Of John Mulkerin Sent: Friday, November 23, 2001 4:56 PM To: dave@xxxxxxxxxxxxx; ethereal-users@xxxxxxxxxxxx Subject: Re: [Ethereal-users] Has anyone figured out the libcrypto problem on RH 7.2? Dave, you're a Saint! I works. Thanks again for the help. John ----- Original Message ----- From: "Dave Cramer" <dave@xxxxxxxxxxxxx> To: "'John Mulkerin'" <jmulkerin@xxxxxxxx>; <ethereal-users@xxxxxxxxxxxx> Sent: Friday, November 23, 2001 1:30 PM Subject: RE: [Ethereal-users] Has anyone figured out the libcrypto problem on RH 7.2? > So when you use the rpm use --nodeps > > Dave > > -----Original Message----- > From: ethereal-users-admin@xxxxxxxxxxxx > [mailto:ethereal-users-admin@xxxxxxxxxxxx] On Behalf Of John Mulkerin > Sent: Friday, November 23, 2001 4:03 PM > To: ethereal-users@xxxxxxxxxxxx > Subject: [Ethereal-users] Has anyone figured out the libcrypto problem > on RH 7.2? > > > After reading all the posts especially Richard Berry's, I don't find any > resolution to the RH 7.2 problem. I've got RH7.2 running with ssh but > can't get ethereal to install because it needs libcrypto.so.0. I've > installed openssl096-0.9.6-6.i386.rpm but still no libcrypto. Has > anyone > figured out how to get the libcrypto on so ethereal will install? > > Any help would be appreciated. > > John > > > > _______________________________________________ > Ethereal-users mailing list > Ethereal-users@xxxxxxxxxxxx > http://www.ethereal.com/mailman/listinfo/ethereal-users > > _______________________________________________ Ethereal-users mailing list Ethereal-users@xxxxxxxxxxxx http://www.ethereal.com/mailman/listinfo/ethereal-users --__--__-- Message: 10 From: "bejay" <mcdon18@xxxxxxxxxxxxxxx> To: <ethereal-users@xxxxxxxxxxxx> Date: Sat, 24 Nov 2001 09:15:32 -0000 Subject: [Ethereal-users] Ethereal / WinPcap / XP / USB This is a multi-part message in MIME format. ------=_NextPart_000_0013_01C174C8.914CB850 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Folks, Can't remember if I had this working before with this set up, but can = somebody tell me whether they have got something similar working. I have XP a Cable Modem connected to the PC using the USB port. I have = also got the beta version of WinPcap 2.3 which should work with XP. Ethereal works okay but no data is being picked up across the USB to the = ISP but is okay across the LAN? Does anybody else have this working, - I know I have had it working in = XP but can't remember whether I connect my Modem to the Ethernet card at = the time. rgds Brian PS - I have removed and re-installed both Ethereal and WinpCap many = times but still just sits there not collecting anything. --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.298 / Virus Database: 161 - Release Date: 13/11/2001 ------=_NextPart_000_0013_01C174C8.914CB850 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Diso-8859-1"> <META content=3D"MSHTML 6.00.2600.0" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D#ffffff> <DIV><FONT face=3D"Comic Sans MS" size=3D2>Folks,</FONT></DIV> <DIV><FONT face=3D"Comic Sans MS" size=3D2></FONT> </DIV> <DIV><FONT face=3D"Comic Sans MS" size=3D2>Can't remember if I had this = working=20 before with this set up, but can somebody tell</FONT></DIV> <DIV><FONT face=3D"Comic Sans MS" size=3D2>me whether they have got = something=20 similar working.</FONT></DIV> <DIV><FONT face=3D"Comic Sans MS" size=3D2></FONT> </DIV> <DIV><FONT face=3D"Comic Sans MS" size=3D2>I have XP a Cable Modem = connected to the=20 PC using the USB port. I have also got the beta</FONT></DIV> <DIV><FONT face=3D"Comic Sans MS" size=3D2>version of WinPcap 2.3 which = should work=20 with XP.</FONT></DIV> <DIV><FONT face=3D"Comic Sans MS" size=3D2></FONT> </DIV> <DIV><FONT face=3D"Comic Sans MS" size=3D2>Ethereal works okay but no = data is being=20 picked up across the USB to the ISP but is okay</FONT></DIV> <DIV><FONT face=3D"Comic Sans MS" size=3D2>across the LAN?</FONT></DIV> <DIV><FONT face=3D"Comic Sans MS" size=3D2></FONT> </DIV> <DIV><FONT face=3D"Comic Sans MS" size=3D2>Does anybody else have this = working, - I=20 know I have had it working in XP but can't remember whether I connect my = Modem=20 to the Ethernet card at the time.</FONT></DIV> <DIV><FONT face=3D"Comic Sans MS" size=3D2></FONT> </DIV> <DIV><FONT face=3D"Comic Sans MS" size=3D2>rgds Brian</FONT></DIV> <DIV><FONT face=3D"Comic Sans MS" size=3D2></FONT> </DIV> <DIV><FONT face=3D"Comic Sans MS" size=3D2>PS - I have removed and = re-installed both=20 Ethereal and WinpCap many times but still just sits there not collecting = anything.</FONT></DIV> <DIV> </DIV> <DIV><FONT face=3D"Comic Sans MS" size=3D2><BR>---<BR>Outgoing mail is = certified=20 Virus Free.<BR>Checked by AVG anti-virus system (<A=20 href=3D"http://www.grisoft.com";>http://www.grisoft.com</A>).<BR>Version: = 6.0.298 /=20 Virus Database: 161 - Release Date: = 13/11/2001</FONT></DIV></BODY></HTML> ------=_NextPart_000_0013_01C174C8.914CB850-- --__--__-- Message: 11 Date: Sat, 24 Nov 2001 01:26:54 -0800 From: Guy Harris <gharris@xxxxxxxxx> To: bejay <mcdon18@xxxxxxxxxxxxxxx> Cc: ethereal-users@xxxxxxxxxxxx Subject: Re: [Ethereal-users] Ethereal / WinPcap / XP / USB On Sat, Nov 24, 2001 at 09:15:32AM -0000, bejay wrote: > Ethereal works okay but no data is being picked up across the USB to > the ISP but is okay across the LAN? Note, though, that if the USB cable modem is acting as a PPP device, you probably won't be able to capture on it; "Windows XP" is really Windows NT 5.1, and WinPcap probably has the same problems capturing on PPP devices in NT 5.1 that it has in NT 5.0 ("Windows 2000") or NT 4.0. (No, I don't know how to determine if it's acting as a PPP device or not.) If it's not acting as a PPP device, try it with WinDump; if it can't capture the traffic, either, report this to the WinPcap developers by sending mail to winpcap@xxxxxxxxxxxxxxxxxxxxxxx --__--__-- Message: 12 Date: Sat, 24 Nov 2001 08:29:37 -0800 (PST) From: Brenda Liu <bhliu@xxxxxxxxxxxxxx> To: ethereal-users@xxxxxxxxxxxx Subject: [Ethereal-users] Tethereal timeout? Hello, Is there any way to configure tethereal to timeout during live capturing? I want it to exit even if there had been no traffic on the interface. Thanks for your help, Brenda --__--__-- _______________________________________________ Ethereal-users mailing list Ethereal-users@xxxxxxxxxxxx http://www.ethereal.com/mailman/listinfo/ethereal-users End of Ethereal-users Digest
- Prev by Date: [Ethereal-users] watching AOL packets
- Next by Date: [Ethereal-users] Ethereal, Cisco350 and Red-Hat7.2
- Previous by thread: [Ethereal-users] watching AOL packets
- Next by thread: [Ethereal-users] Ethereal, Cisco350 and Red-Hat7.2
- Index(es):
