networking-forum.com
Community BlogCommunity Wiki * Register  * Search  * Login
View unanswered postsView active topics

All times are UTC - 6 hours [ DST ]



Post new topic Reply to topic  [ 8 posts ] 
Author Message
 Post subject: wireshark quiet network
PostPosted: Fri Nov 16, 2007 8:15 am 
Offline
New Member
New Member

Joined: Fri Nov 16, 2007 8:09 am
Posts: 1
Hi i have an assignment at school where i have to use wireshark to analyse packets on a network. one of the experiments is to analyse a quiet network on one of the machines at school. how do i make a network quiet. My lecturer gives an example of what a quiet network might look like. Its all SSDP. But when I try it I get TCP and loads of other stuff I've tried using filters but i cant get it like his. Is a quiet network always like his or can ther be varying types of quietness
Thanks in advance.


Top
 Profile  
 
 Post subject:
PostPosted: Fri Nov 16, 2007 9:03 am 
Offline
Post Whore
Post Whore
User avatar

Joined: Mon Jun 11, 2007 9:43 am
Posts: 1858
Location: Irondequiot, NY
Maybe your teacher is expecting you to create an appropriate filter to only view unusual traffic?

Not sure what he would mean by quiet networks. Ask him or her to clarify.


Top
 Profile  
 
 Post subject:
PostPosted: Fri Nov 16, 2007 1:08 pm 
Offline
Cisco Inferno
Cisco Inferno
User avatar

Joined: Mon Jul 10, 2006 12:58 am
Posts: 10201
Location: Seattle
Moved to forum lobby...

You will only be able to observe broadcast traffic if you're on a switched fabric... You will need to be creating traffic yourself if you want to view it on your network card.

_________________
Reasonably un-nerdy blog:
americanwerewolfinbelgrade.wordpress.com/


Top
 Profile  
 
 Post subject:
PostPosted: Sat Nov 17, 2007 6:42 am 
Online
Post Whore
Post Whore
User avatar

Joined: Fri Mar 11, 2005 10:26 pm
Posts: 2512
Location: Perth, Western Australia
Our college network runs Novell Netware so there's IPX traffic on the wire all the time, then when the class next door fires up there's a milllion ARP requests, and there's always STP PDUs and before we pulled the Network Admin into line (which did not impress them!) there was even OSPF traffic to the desktop.

When I first demo Wireshark to my class I just launch a browser and go to www.cisco.com but in 2 to 3 minutes I usually collect at least a couple of thousand packets because of all that other stuff.

A quiet network? What's that?

Aubrey

_________________
The illiterate of the 21st century will not be those who cannot read and write, but those who cannot learn, unlearn, and relearn. Alvin Toffler, "Future Shock" 1970


Top
 Profile  
 
 Post subject:
PostPosted: Sat Nov 17, 2007 7:50 am 
Offline
Senior Member
Senior Member
User avatar

Joined: Wed Mar 28, 2007 1:52 am
Posts: 483
Location: Melboune, Australia
Try per-port vlans and bind them to really small subnets like /30 then you'll only have max 2 hosts on one segment. That should make things pretty quiet .


Top
 Profile  
 
 Post subject:
PostPosted: Sat Nov 17, 2007 8:47 am 
Online
Post Whore
Post Whore
User avatar

Joined: Fri Mar 11, 2005 10:26 pm
Posts: 2512
Location: Perth, Western Australia
netman839 wrote:
Try per-port vlans and bind them to really small subnets like /30 then you'll only have max 2 hosts on one segment. That should make things pretty quiet .


Good idea but students do not normally have that type of access and control over their school's network :D

If fact neither do instructors - this depicts the usual Network Adminiistration approach to users very accurately.

Aubrey

_________________
The illiterate of the 21st century will not be those who cannot read and write, but those who cannot learn, unlearn, and relearn. Alvin Toffler, "Future Shock" 1970


Top
 Profile  
 
 Post subject:
PostPosted: Wed Nov 28, 2007 7:11 pm 
Offline
Post Whore
Post Whore

Joined: Tue Aug 28, 2007 5:53 pm
Posts: 1184
Quote:
You will only be able to observe broadcast traffic if you're on a switched fabric


what if you used port spanning?


Top
 Profile  
 
 Post subject:
PostPosted: Mon Mar 03, 2008 7:24 am 
Offline
New Member
New Member
User avatar

Joined: Mon Mar 03, 2008 2:15 am
Posts: 19
Location: CA
I imagine it would be difficult to study traffic if you were on a network with a lot of activity going on. Using a home network/router would seem to work for this lab.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 8 posts ] 

All times are UTC - 6 hours [ DST ]


Who is online

Users browsing this forum: bman, srg, Steve and 6 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group