ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-users: Re: [Ethereal-users] Only Seeing Outgoing Packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Ulf Lamping <ulf.lamping@xxxxxx>
Date: Sun, 22 Jan 2006 01:31:43 +0100
Simon Bradley wrote:
"Every port automatically operates at the proper speed, while the built-in
self-learning 10 to 100 Mbps bridge automatically discovers where each user
is and filters or forwards traffic accordingly."
As you mention it, the wiki says: "Note that "dual-speed" hubs that support both 10MBit and 100MBit ports might not send unicast traffic between 10MBit and 100MBit ports; if so, you can only capture traffic between hosts whose Ethernet interfaces are running at the same speed as the Ethernet interface on the machine capturing traffic."
So, the hub is in fact more clever than I thought. I don't know if it's a
true switch (I'm not 100% sure of the definitions here), but it seems to be
more than just a hub.
The bridge between the two speeds seems to be a (bit of a) switch. I've added your hub to the wiki and mentioned the bridge problems.
I'm guessing the incoming packets are being sent only to the router, and not
to the monitor laptop.
You may try to adjust the speed link of the laptop to 10MBit, this can usually be done in the network driver settings.

And don't forget to reset this setting after you've finished researches ;-)
Does it make sense that the hub would be able to do
this, considering the destination machines are not directly connected to the
hub?
All the packets will go to the MAC address (OSI Level 2) of the router, at that level of switching/bridging the destination IP is simply not interesting.
Meanwhile, I have a hub that's definitely ONLY a hub that I can try. I'll
let you know what happens with that (although it won't be till Monday that I
can get a hold of that).
If it's working, you may add it to: http://wiki.ethereal.com/HubReference as well so others will benefit from your researches as well ...

Regards, ULFL