Wireshark · Ethereal-users: RE: [Ethereal-users] How do I trace packet loss with ethereal?

["Ulf Bertilsson" <ulf.bertilsson@xxxxxxxxxxxx>]

> I am using 2 Windows 2000 PCs with a span set between 2 ports 
> on a Cisco  Catalyst 4006.
> I am definitely losing packets throughout my network and I 
> need to trace an ftp session between these 2 ports to verify
> exactly where the packets are being dropped. I've searched
> through the archives and tried different things with the GUI,
> but I am unable to  trace packets from one PC to the other.
> Can anyone send me some instructions on this? Or tell me what 
> I need to do? 
> Your help is appreciated.

First a port a monitor port,
to make sure you get all the packets.

I wonder if looking closely on ICMP
packets might give you any hints.

BTW: Try play with 10/100 and full duplex on the nic,
rather than "auto config".

We had prob with Cisco with this.

Good luck.

Ulf