On Mon, Aug 30, 1999 at 06:11:04AM -0500, Philip Long wrote:
>
>
> Guy Harris wrote:
>
> > > > Your sniffing machine (computer A) is on the ethernet segment.
> > > > Your other computer (computer B) is on the ethernet segment.
> > >
> > > Yes. Both on the same 100 base Tx; Incidentally, I've noticed that
> > > computer A (lyta, always running linux) can serve up ftp to computer B
> (fang)
> > > at a sustained rate of 3500 KB/sec under linux, but when fang has to be
> a
> > > win32 box, the transfer rate (both with Netscape 4.61 BTW) is only 1800
> > > KB/sec.
> >
> > So "lyta", not "fang", is the machine running Ethereal, K-Arp-Ski, and
> > "tcpdump" in this situation (as it's computer A, and Laurent used
> > "computer A" to refer to the sniffing machine)?
>
> I've done it both ways with the same results. Mostly I just see ARP
> packets an
> the occasional apple talk, IPX, etc.
And these ARP, appletalk, and IPX packets are broadcasts, aren't they?
The device you are connected appears to be a switch.
--gilbert
