Ethereal-users: Re: [Ethereal-users] finding machine that send broadcasts

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Tue, 10 Dec 2002 11:03:16 -0800
On Tue, Dec 10, 2002 at 04:42:21PM +0100, S. Ancelot wrote:
> I would like to use ethereal to find which machine sends broadcasts on 
> my network,
> how to do that with ethereal ?

Well, one way to do that might be to do a capture with Ethereal using
the capture filter "broadcast"; when you stop the capture, it should
show you all the broadcast packets on the network.

You'd then have to look at the link-layer and network-layer addresses in
those packets to see what machines are sending the broadcasts;
translating those addresses to actual pieces of hardware may be harder,
and there's not much Ethereal can do about that (at most, it can try to
look up the link-layer addresses and tell you the names for those
addresses, or the probable vendors of the machines or their networking
cards, and try to look up the network-layer addresses and tell you the
names for those addresses).