Re: [Ethereal-users] Ethereal 0.8.18 question...

[David Moore <davem@xxxxxxxxx>]

Regarding Hubs:

I ran afoul of this with a 4-port Netgear auto sensing 10/100 hub. It turns out that it's actually
two hubs, a 10 and a 100 with a switch between. Even though I was running all 10BaseT machines, I
still couldn't see everything until I changed to an older "dumb hub".



"Lambe, Dave" wrote:
> 
> Thanks for the reply Guy!
> Wouldn't it be a SWITCH (if it switches) and a HUB (if it's flat)? So
> wouldn't a "switching hub" actually be a switch?
> I played with Tethereal today, it seems to grab ALL packets, not just the
> "local" & broadcast stuff. The exact same hardware, but Ethereal wouldn't do
> it.
> 
> Thanks again,
> 
> Dave
> 
> -----Original Message-----
> From: Guy Harris
> To: eth@xxxxxxxxxx
> Cc: ethereal-users@xxxxxxxxxxxx
> Sent: 6/8/01 7:46 PM
> Subject: Re: [Ethereal-users] Ethereal 0.8.18 question...
> 
> > I'm using ethreal 0.8.18 on a Red Hat 7.1 system with a libpcap
> 0.4-39;
> > well, I can grep only packets to/ from the machine I'm on and
> > broadcasts; the NIC is a D-link 500TX ; I'm connected to a 10M hub.
> 
> Switching hub, or non-switching hub?  If it's a switching hub, even if
> the card *is* in promiscuous mode, it won't see traffic other than
> traffic that the host directs towards its port on the hub, which will
> probably be only unicast traffic to that host or broadcast/multicast
> traffic.
> 
> (Yes, 10BASE-T switching hubs exist - or, at least, existed at one
> time.)
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users