Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] One NIC on public side

From: Richard Bejtlich <taosecurity@xxxxxxxxx>
Date: Mon, 17 May 2010 07:22:24 -0400
On Sun, May 16, 2010 at 6:44 AM, Martin Visser <martinvisser99@xxxxxxxxx> wrote:
> Using a hub that runs with ports at half-duplex and a having a PC with a
> port set at full-duplex *will* cause packet loss. A PC configured to
> full-duplex has collision detection disabled, so if a collision does occur,
> the PC will not know about it and not retransmit the lost frame.
> This used to be a common problem but is increasingly rarely seen in the wild
> (because of auth-negotiate being the default on switches, and gigabit NICs
> which are recommended to be configrued as auto).
> Regards, Martin
>
> MartinVisser99@xxxxxxxxx

Martin, I assumed someone using a true hub would know that hosts
connected to it should be configured to use half duplex and not suffer
from duplex mismatches.

Sincerely,

Richard