[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 167
  • Last Modified:

Windows 2000 server Network Monitor and Etherreal report almost no packets

I know the network monitor used to work on my w2k server.

Now, it reports no packets.  I tried all network interfaces.

Etherreal reports only a couple of arps - meanwhile I am browing the internet and sharing files with another computer.
No such packets.  Its magic!

I have installed several proxy servers and firewalls and things in the past.  How can I find out if something is preventing these programs, etherreal and network monitor, from seeing the packets?  Is there something more, low level, that would show me the packets?

I appreciate the time that it takes to reply.

Thanks,

Greg
0
gsgi
Asked:
gsgi
  • 4
  • 4
1 Solution
 
anil_uCommented:
Some things you may want to check

1. Double check that you are selecting the correct network card
2. Make sure ethereal is in prosmiscous mode
3. Check that you are not filtering the packets to only show certain packets

If you are able to browse the internet, then you should be able to see http packets on that computer.
If there was something blocking it, then you would be able to browse the net.

Hope I could help


0
 
gsgiAuthor Commented:
As far as I know, there is only one NIC in it.  It was selected.
Prosmiscous mode was on in etherreal.
I had just installed etherreal - I have never seen it filter upon a new install.

I am going to check the whole thing again.  Why are there two network interfaces in
Network Monitor if there is only one NIC in it?  I will triple check the list you have
provided.  Thanks.

-Greg
0
 
gsgiAuthor Commented:
I started to shut down services that I thought were unnecessary.  When I shut down spf (segate personal firewall) the packets showed back up again.  I had previously uninstalled segate personal firewall, but apparently the uninstall process left this service around?  So the question remains, since the computer was browsing the internet and using the network, what software could have shown me at a lower level that spf was preventing the ethernet sniffer software programs from showing the packets?

-Greg
 
0
Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
anil_uCommented:
As far as I am aware, thats as low as it gets.
Regarding SPF, I have had problems with that firewall. Sometimes packets didnt get thorough, sometimes it just blocked evreything.
0
 
gsgiAuthor Commented:
So which software firewall do you use?
0
 
anil_uCommented:
I reverted back to zonealarm, its ok, not as good as SPF but havent had any problems with it.

Anyways thanks
Glad I could help :)
0
 
anil_uCommented:
Hey, have a look at this when you get a chance
http://www.experts-exchange.com/Security/Firewalls/Q_20843535.html
0
 
gsgiAuthor Commented:
Funny, that's what I have just done too.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 4
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now