Recent content by matttheknife

Hi bdoub1eu, regarding the process it seems you misunderstood. As I pointed out before, the Autonegotiation does not test the quality of the cable. Both sides (PC and Switch) simply check whether they can enable the best possible parameters. They start at 1000 Full, if this fails then...

Hi, you can use a blank RJ45 connector with no cable crimped on it where you short circuit your Ethernet Send Pair with the Receive Pair. This way you will get a physical link that will get your NIC up. Connect pins 1 - 3 and 2 - 6. Regards Matt

Hi there. First and foremost: Your link speed settings on switch and PC have only very, very little to do with the quality of your cable. Cat 5e and Cat 6 have different electrical characteristics. Main difference, to make a long story short: You will have better shielding against noise, and...

You will get the graph of all data, not just the subnet pair. Reason: expert and monitor (incl protocol dist.) are working separately. If you want to see the protocol distribution of just the subnet pair you will have to create a Capture Filter (Capture - Define Filter) and create a profile...

Hi Jon, some good posts. But not all are relevant. Here are 2 more cents from a networking guy. 1) Make sure that you have 1 Gbit/s Full Duplex enabled on both sides. If necessary disable Autonegotiation. 2) Do not use Jumbo frames, please. Sniffer tests have shown, that you end up with...

Can you supply additional information about the IP settings (addresses, subnet mask, default gateway) of both, the XP box (both NICs and you laptop) for both szenarios? This way we could check, whether the problem is addresss related. BTW, using an external wireless router connected to your...

I recently took the new CCNA exam. The exam included WAN as well as LAN technologies and focussed mostly on the ICND topics. There were almost no general questions that are covered in the Intro material only. So I think there may be not too much of a difference between the ICND exam and the CCNA...

hack12, sorry for the delay. You are right. 1460 Byte of TCP data is the actual data of the upper layers which is also referred to as the payload or the user data. This statement is 100% correct for all TCP-based apps that run directly on top of TCP such as FTP, Telnet, etc. In the...

1st question: The maximum length of an Ethernet frame is 1518 bytes. The math goes like this: Layer2-Header: Ethernet - 18 byte - Destination Address - 6 byte - Source Address - 6 byte - Length/Type - 2 byte - Checksum (CRC) - 4 byte The checksum is stripped off at the NIC level and thus not...

I assume that you are using Windows-OS on you machine. Which OS exactly? Can you check your TCP/IP settings for both NICs (ipconfig/all |more)? Through the "Auto" settings there could be a Default Gateway defined on both NICs. And this will definitely not work on a Windows box. If this...

Hi, I experienced the same thing once. Here is what you can do: - Save the file(s) with .caz extension This is compressed format and has always worked for me. OR - Save Ethernet files as .enc format. This is the old DOS Sniffer format. Regards Matthias

We cannot really be sure, whether the MAC addresses are valid, when there are error frames, that actually make it through the NIC up to the Sniffer. It could be that already the Source Address would be corrupted. I assume that is why you won't find a table, where MAC addresses are associated...

Hi, what you see is normal operation and thus not a problem at all. This is what you will always see when a general login is used. Sequence: WINS: C ID=40 OP=REGISTER NAME=<username><03> Client is trying to register <username>, <03> is the messenger service under which the user can receive...

Hi Alf, I agree on the Sniffer Symptom. Also agreed, that you won't see any responses from WINS Server being on a local segment, when you are sniffing from remote. Only, a WINS Server will not answer to any Broadcast requests, only to directed requests. He will only be able to pick these...

Hi Sven, Active Arror means, that the station wants to register a name that is already registered with the WINS server by another machine. WINS is a flat database that only allows single usage of a name in the database. Now it really depends, what type of name the clients tries to register...