HankCash
asked on
Need to capture Rip v.1 traffic with WireShark.
My company sells a network device that was developed many years ago that supports RIP v.1. A customer is complaining that the device is responding to RIP v.1 broadcast even though he is not using RIP. The customer is using WireShark. We have created a new software version for this customer and removed RIP. I’ve been asked to confirm that it no longer creates any RIP traffic. I figured that this would be easy enough. I planned on digging up an old router that uses RIP v.1 and put it on a network with our device and capture packets. The problem is that I have not been able to capture any RIP traffic. (I am not having a problem capturing with WireShark in general.) I am using an Adtran NetVanta 1224STR as my router; I turned on Rip v.1. I’ve also tried plugging in several old consumer grade routers into the network that support RIP v.1 but I have not been able to capture any RIP traffic.
My lack of knowledge in this area should be evident at this point. I need to capture a RIP v.1 broadcast coming from a router on the same network as our in house device. Any help would be appreciated.
My lack of knowledge in this area should be evident at this point. I need to capture a RIP v.1 broadcast coming from a router on the same network as our in house device. Any help would be appreciated.
As long as your PC is on the same layer 2 network you should see the RIP broadcasts.
giltjr is spot on. If both devices (your companies and the Netgear) are connected to the same network as your PC running Wireshark, you should see RIP packets.
But, if the Netgear isn't configured for RIP, then it won't send any RIP packets. And since you've modified your device to not send RIP packets, that could explain why you're not seeing anything.
But, if the Netgear isn't configured for RIP, then it won't send any RIP packets. And since you've modified your device to not send RIP packets, that could explain why you're not seeing anything.
ASKER
Yes, it seems so simple but I have not seen any RIP packets.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I only have one network configured. I will configure a second network and post back.
There's your problem. You need a second network (that is operational) to advertise.
ASKER
Thanks for replies. Besides not having a second IP network, I also missed the part where I needed to explicitly identify the networks that I wanted RIP to broadcast.