Ethereal-users: Re: [Ethereal-users] lan configuration for ethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Hansang Bae <hbae@xxxxxxxxxx>
Date: Mon, 06 Jun 2005 23:28:13 -0400
On 02:50 PM 6/2/2005, B MCC wrote:
>[snip: virus slamming the GW. Internet traffic slowed to a crawl]
>I finally discovered the "show ip
>nat translation" on the cisco router and that pointed
>out the machine that the requests were coming from.
>Could there have been a way to find this problem using
>ethereal in our current configuration ? 


Sure.  You could have spanned the router's Ethernet port (your GW) and would have seen significant traffic due to the virus.  

hsb