Traffic Analysis/Packet Analysis?? 2

[TopRung]

Okay, so I have gotten as far as setting up my laptop with Ethereal and acquired a small portable Hub (switched network).

Trying to find resources on this topic has been difficult. I would like some BASIC to ADVANCED troubleshooting guides that will help me understand what the heck I am looking at on these captures.

If I notice that a connection is slow, what should I look for in the packets? Or if a PC loses connections to the network, what should I follow to find the root?

A resource that can help troubleshoot such topics would be gold.


Thank you in advance!

 

[ElijahBaley]

You will need to understand TCP/IP addressing concepts as well as Ethernet 802.3 CSMA/CD and other datalink layer protocols.

There really is no easy way of using a frame/packet anyliser without having a good idea of what you are looking for in the headers.



..EB


"Smoke me a kipper, I'll be back for breakfast!"

"Captain A.J. Rimmer, Space Adventurer!"

 

[rwullems]

try this link to help you on the way:

http://www.robertgraham.com/pubs/sniffing-faq.html

Regards,
Robert

Robert Wullems
Network Specialist
SCP/SCE/SCM/CNX/MCP/MCSA/Network+
***************************************
If you can Sniff it, you can solve it!
***************************************

 

[TopRung]

Thank you rwullems. That is along the lines of what I am searching for.

{ Please post more if you have it }

TY!!!!!

 

[TekTippy4U]

rwullems;
Great link!
very useful info - all in one!
thanks

TT4U

Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs

 

[rwullems]

Hi Guys,

Don't thank me, i only post the link.
You should thanj Robert Graham He is one of the designers of the NAI sniffer expert system, later started a company called Network Ice, know from the Black Ice Defender.

I met him one time when i was on training at Network Ice, this guy is really a genius in his bussiness and i use his site a lot for reference if i want to know something.
Regards,
Robert

Robert Wullems
Network Specialist
SCP/SCE/SCM/CNX/MCP/MCSA/Network+
***************************************
If you can Sniff it, you can solve it!
***************************************