Wireshark · Ethereal-users: [Ethereal-users] RE: Using Ethereal with SMC2536W-AG wireless

[Watkins Robert-FRW005 <frw005@xxxxxxxxxxxx>]

Message: 4
Correction: My poor choice of wording...sorry.
Ethereal was displaying and capturing forwarding/broadcast packets
discovered on the WLAN but not 802.11 protocol-type specific traffic. That
is, we did not see any "802.11x" in the protocol column.
 

Date: Thu, 17 Jun 2004 19:29:22 -0700 (PDT)
From: "Guy Harris" <gharris@xxxxxxxxx>
Subject: Re: [Ethereal-users] Using Ethereal with SMC2536W-AG wireless
	card
To: "Ethereal user support" <ethereal-users@xxxxxxxxxxxx>
Message-ID: <6418.17.202.40.208.1087525762.squirrel@17.202.40.208>
Content-Type: text/plain;charset=iso-8859-1

Watkins Robert-FRW005 said:
> We installed the SMC2536W-AG on a PC running Windows XP and it found 
> the network, etc..., but we cannot decode the 802.11b packets using 
> Ethereal version 0.10.4.

What do you mean by "cannot decode"?  In the context of Ethereal, "cannot
decode" means that the packets are captured correctly, but are not displayed
correctly in the packet detail window.  It does *not* mean that you can't
even capture the packets; that's "cannot capture".

> We tried de-selecting the  promiscious mode - but no luck.

Turning off promiscuous mode is a workaround for a "cannot capture" problem:

    http://www.ethereal.com/faq.html#q5.37

It's not a workaround for a "cannot decode" problem.

> Ethereal FAQs state that it may be the vendor's driver which it does 
> not support. We contacted SMC but they could not adivse us on this 
> matter. Does anybody have any suggestions or could recommend another 
> approach - different card, etc. ?

Different operating system?  Windows drivers for wireless cards are
*really* not very helpful to applications that try to capture network
traffic; Linux and BSD drivers do a better job.




------------------------------

Message: 5
Date: Fri, 18 Jun 2004 05:29:52 +0200
From: "Martin Regner" <martin.regner@xxxxxxxxx>
Subject: Re: [Ethereal-users] Ethereal - ANSI SCCP problems
To: <sbhandare@xxxxxxxxx>
Cc: ethereal-users@xxxxxxxxxxxx
Message-ID: <0f8901c454e4$84ab44f0$cd8d59d5@SMART>
Content-Type: text/plain;	charset="iso-8859-1"


Bhandare Shashidhar wrote:
> I am trying to use Ethereal for monitoring ANSI SCCP.
> I observed the following problems while using GT
> format 0 and GT Format 1. Can you please let me know
> were there any fixes done to resolve these problems.
> 
> I have not used GT Format 2 yet.
> 
> I am using 0.10.4 release of Ethereal on SUN OS 5.9.
> 


> 
> Problems:
> 
> 1. For GT Format 0, the SCCP Called and Calling Party
> IE headers are decoded similar to ITU. Where as the
> ordering of SSN and PC fields are reversed.
> 
> 2. For GT Format 1, the Called and Calling party IE
> has these fields:
> 
>     OCTET x:
>      - Translation type
> 
>     OCTET y:
>      - Numbering Plan
>      - Encoding scheme
> 
> The present decode assumes one more field Nature of
> Address at OCTET z: and decodes the fist byte of
> address digits.

Please note that you probably have to configure Ethereal to handle ANSI
instead of ITU.

Edit/Preferences.../Protocols/MTP3/MTP3 Standard

I don't know if that will solve your problems, but at least it seems that
packet-sccp.c is using the mtp3_standard setting from MTP3 dissector.




------------------------------

Message: 6
Date: Fri, 18 Jun 2004 09:39:02 +0100
From: "Phil Cassia" <phil.cassia@xxxxxxxxxxxxxxxxxxxxxx>
Subject: [Ethereal-users] High no of arp requests
To: <ethereal-users@xxxxxxxxxxxx>
Message-ID:
	
<3DF6B246572B1A4E81872F4A48199EEA8322@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
Content-Type: text/plain;	charset="US-ASCII"

Hi 
Is it normal for PC's mainly Winxp to do arp requests to the next ip in the
address range eg. 192.168.10.15 will request mac adress for 192.168.10.16
even if it doesn't exist.

Thanks Phil 



------------------------------

Message: 7
Date: Fri, 18 Jun 2004 16:25:26 +0300
From: Ioannis Liabotis <iliaboti@xxxxxx>
Subject: [Ethereal-users] tethereal -z problem in Windows NT
To: ethereal-users@xxxxxxxxxxxx
Message-ID: <40D2ED46.6020905@xxxxxx>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed

Hi all,

I have installed ethreal 0.10.4 in a WinNT machine  with winpcap-3.1.beta 3.
I am using  tethereal -i "ifname" -z io,stat,1,ip.addr==192.168.0.1 -a
duration:5 Although capturing of packets is ok -z doesn't provide the
correct statistics. In the table produced the column #0 name is null instead
of ip.addr==192.168.0.1. I believe that capturing is ok because when I
capture to a file and process the file with tethereal on linux, or  on
windows 2000 everything is fine. The same command works perfectly for me on
linux and windows 2000.

Furthermore on Windows NT tethereal gives me: adns: GetNetworkParams()
failed with error [50] ERROR_NOT_SUPPORTED

Any help on solving this problem would be appreciated,
thanks,
Ioannis-




------------------------------

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users


End of Ethereal-users Digest, Vol 14, Issue 21
**********************************************