Search results for query: *

I have an application that I believe will decode it. Can you send me a small portion of the trace so I can test it before I list it here? I would need the 1521 setup, and the next 30 that are using the dynamic port number.

Simple. Do a binary pattern match for the last bit in the first byte of the Destination Address (the first byte in the packet). If the bit is a 0 the packet is a unicast, if it is a 1, it is either a broadcast or multicast. More detail than you wanted to know: Ethernet transmits the bits onto...

I am looking a sniffer trace file, and I can see a response from the server with one column and 15 rows of data in it, yet at the very end of the response is ORA-01403 No Data Found. I have never seen this with data before, only as a response all by itself. Can anyone explain why I would see...

Direct from the readme.wri for Sniffer Portable 4.7.5 sp3 (I know, I can't believe I'm admitting to reading the readme in public either), here are the list of supported cards that NAI has enhanced drivers for: Xircom CBE2 Cardbus Card Xircom Realport Cardbus Card Xircom Realport2 Cardbus Card...

You might also want to check out www.packet-level.com/library.htm. It is Laura Chappell's web site and she has some wonderful articles on sniffing. Many of them are Sniffer specific, and contain screen shots. Of course, the best place to go is www.snifferu.com and sign up for a Sniffer...

MSS and MTU almost the same, but not quite. MSS is the Maximum Segment Size which is the largest segment (layer 4, yet not including the layer 4 header) that can fit on the current physical medium. MTU is the Maximum Transmission Unit which is the largest packet (layer 3, including the layer 3...

Mike, Email me at sniff4food@yahoo.com with contact info and I will walk you through the install. Betty Life is better in BettyLand!

Adding on to Robert's explanation, bear in mind that the same physical segment could be two mirror ports on a switch. Let's say that you mirror the client's port and the server's port, and they are in two different vlans. Let's say you also use different IP subnets for your different vlans...

I need to better understand how the protocols layout when a user sends an email via Exchange. I can find lots of information about POP3 protocols, but not stuff specific to Exchange. For example, why does the client "Bind to End Point Mapper" or "Request Service Locator&quot...

To install the console software in XP, all you have to do is go into the installation file's properties and go to the Compatibility Tab, and check the "Run this program in compatibility mode for:" box and select Windows 95. Installs like a charm after that. Many thanks to my student...

Andreas, Go to http://www.realtek.com.tw/downloads/downloads.aspx for the 8139 drivers. Betty

Ruster, I have a list of the web sites I bring up when I teach for SnifferU. http://www.cstonepros.com/bettyland/ Once you are done with your list, I would love to do a reciprocal link. Two other good ones (not on my list) are: http://www.robertgraham.com/pubs/sniffing-faq.html...

What OS are you running? I have a realtek 8139 on my laptop running win2k professional and I am running Sniffer Pro with no problem.

http://standards.ieee.org/regauth/ethertype/type-pub.html is also good. Life is different in BettyLand

If you have two Sniffers, by all means have one at the client and one at the server for comparison. Otherwise, move back and forth between the client and server. If the response time is fast next to server, but slow to the client, the latency is being induced by the network. If slow sniffing...

You should also position the Sniffer next to the client. Bearing in mind that the delta times MikeS suggested your looking at are when those frames passed by the Sniffer, not when the client sent and received the information. By sniffing near the client you will get a better feel for the...