Difference between revisions of "Ethereal"
From TD-er's Wiki
Jump to navigationJump to search| Line 2: | Line 2: | ||
We captured the network data with the following machines: | We captured the network data with the following machines: | ||
| − | + | * <tt>192.168.1.101 </tt>- Asterisk #1 | |
| − | + | * <tt>192.168.1.106 </tt>- Asterisk #2 | |
| − | + | * <tt>192.168.1.3 </tt>- Windows machine 1 (also running both VMware's for both Trixboxes) | |
| − | + | * <tt>192.168.1.189 </tt>- Laptop #1 running only X-lite | |
After capturing we filtered out other data to machines not on the local network (IP-adress other than 192.168.1.x), using this filter: | After capturing we filtered out other data to machines not on the local network (IP-adress other than 192.168.1.x), using this filter: | ||
ip.src >= 192.168.1.1 && ip.src <= 192.168.1.255 && ip.dst >= 192.168.1.1 && ip.dst <= 192.168.1.255 | ip.src >= 192.168.1.1 && ip.src <= 192.168.1.255 && ip.dst >= 192.168.1.1 && ip.dst <= 192.168.1.255 | ||
| + | = Analysis = | ||
We did also do some [[Ethereal Analysis]] on the traffic during several conversations. | We did also do some [[Ethereal Analysis]] on the traffic during several conversations. | ||
Revision as of 13:03, 30 January 2007
Ethereal is used to analyse the network traffic.
We captured the network data with the following machines:
- 192.168.1.101 - Asterisk #1
- 192.168.1.106 - Asterisk #2
- 192.168.1.3 - Windows machine 1 (also running both VMware's for both Trixboxes)
- 192.168.1.189 - Laptop #1 running only X-lite
After capturing we filtered out other data to machines not on the local network (IP-adress other than 192.168.1.x), using this filter:
ip.src >= 192.168.1.1 && ip.src <= 192.168.1.255 && ip.dst >= 192.168.1.1 && ip.dst <= 192.168.1.255
Analysis
We did also do some Ethereal Analysis on the traffic during several conversations.
