Network tracing confusion

harmandeep

harmandeep

VirTuaLiZaTioN Freak
Contributor

Attachments

  • Wireshark.jpg
    Wireshark.jpg
    111 KB · Views: 145
wireshark captures layer 2 traffic ie frames which are then dencapsulated to packets/datagram ie level 3 for res ip's

in real world u wont get all packets because good switches do have mac table witch helps in switching intelligently and hence all frames wont reach u r wireshark host :p hope u get this its in chapter 1 and 2 CCNA
 
Software solutions(like your virtual swx here) can not provide layer 2 functions anywhere close to the hardware switched and routers, so, this is not unusual.
 
nopp i was wrong

u see ethnet is broadcast multi access lan technology

hence wireshark captures layer 2 frames ie all frames on lan hence u r findings are correct and justified by the technology used underneath
 
more prominently ........ this wht is happening ....afaik now ;)

Promiscuous mode

In computing, promiscuous mode or promisc mode is a configuration of a network card that makes the card pass all traffic it receives to the central processing unit rather than just packets addressed to it — a feature normally used for packet sniffing.

Definition: In regards to VMware ESX Server; promiscuous mode is used to allow a host to see all traffic passing on a vswitch.

Uses: Firewalls, Port Sniffers, IDS, etc.

| How to Control Promiscuous mode of VM guest,s Ethernet Cards |

Enable Promiscuous Mode for the VM

Add a line to the configuration file ( vmx ), this probably goes without saying, but substitute n for the adapter (0-4) and remove the brackets.

ethernet[n].noPromisc = “FALSE”

Disable Promiscuous Mode for the VM

ethernet[n].noPromisc = "TRUE"

When i disabled P mode of the VM Lan card,s and again started a Trace ...

i found that VM Guest,s changed their behavior but still systems were not capable of " MAC LEARNING " and used broadcasts for get destinations MAC via ARP's

here's the dumps of traces with No P mode :

1) Now blank when captured from Xp-Sp3-06 ( not involved in traffic 0

2) Captured from Xp-Sp3-02 ( evolved )
 

Attachments

Back
Top