Wireshark · Wireshark-users: Re: [Wireshark-users] One NIC on public side

[Martin Visser <martinvisser99@xxxxxxxxx>]

Using a hub that runs with ports at half-duplex and a having a PC with a port set at full-duplex *will* cause packet loss. A PC configured to full-duplex has collision detection disabled, so if a collision does occur, the PC will not know about it and not retransmit the lost frame.

This used to be a common problem but is increasingly rarely seen in the wild (because of auth-negotiate being the default on switches, and gigabit NICs which are recommended to be configrued as auto).

Regards, Martin

MartinVisser99@xxxxxxxxx

On Sat, May 15, 2010 at 11:32 PM, Richard Bejtlich <taosecurity@xxxxxxxxx> wrote:

Hello,

Using a hub does not cause packet loss due to collisions.  Half duplex
Ethernet was designed to deal with collisions.

Sincerely,

Richard

On 5/13/10, Boonie <newsboonie@xxxxxxxxx> wrote:
>> So, disabling some of these protocols will allow me to safely connect it
>> on the public side again then?
>
> Without IP, I do not see how these other protocols will reach another
> machine. But, just disable all of them.
>
> Are you sure you want tu run all traffic through a hub? This might lead to
> packetloss due to colissions.
>
> Dave
>
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>
> mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
>
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe