Wireshark · Ethereal-users: RE: [Ethereal-users] new to ethereal (understanding data captured)

["Visser, Martin" <martin.visser@xxxxxx>]

Chad,

 

Ideally you really need to know what you expect to see and compare this with what you are seeing on the wire. There are lots of things that happens on networks that at first take look wrong or incorrect, but more often than not are just the way things are.

 

If you hunt around you will find information on protocols such as NCP (for Novell Netware stacks) and TCP (the IP reliable transport layer). However you may need to dig deeper to find out how your application  expects to use these protocols.

 

As you have a working and flaky example of the application you are probably best off comparing the two and looking for differences.

 

Of course you should look at physical layer statistics that your network infrastructure (switches/routers) might be able to provide.

 

Martin

Martin Visser, CISSP
Network and Security Consultant
Consulting & Integration
Technology Solutions Group - HP Services

410 Concord Road
Rhodes NSW  2138
Australia

Mobile: +61-411-254-513
Fax: +61-2-9022-1800    
E-mail: martin.visserAThp.com

This email (including any attachments) is intended only for the use of the individual or entity named above and may contain information that is confidential, proprietary or privileged. If you are not the intended recipient, please notify HP immediately by return email and then delete the email, destroy any printed copy and do not disclose or use the information in it.

 

---

From: ethereal-users-bounces@xxxxxxxxxxxx [mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Chad Hays
Sent: Wednesday, 8 June 2005 11:28 PM
To: ethereal-users@xxxxxxxxxxxx
Subject: [Ethereal-users] new to ethereal (understanding data captured)

I am new to using ethereal and am 
trying to understand and interprete the data I have captured.  The issue we 
are trying to resolve is:  We have a datamax label printer (IP printer) 
that gets info from our AS400, it  stops the writer randomly (like a time 
out)  We have the same setup at different places in the plant with no 
issues, so we  are trying to determine if there is a network issue. 
 The last data captured is

also, we have a cnc pc that 
communicates with our file and print sharing server that has A TON of "c search 
for file or subdirectory in the info tab, using NCP protocol.   Not sure 
whats going on there but may be creating excessive traffic, 
thanx in advance for the help

Chad Hays   MCP, CNE,  A+

CE/N Analyst

731.686.4353

chays@xxxxxxxxxxxx