Difference between revisions of "Ethereal"

From TD-er's Wiki
Jump to navigationJump to search
Line 2: Line 2:
  
 
We captured the network data with the following machines:
 
We captured the network data with the following machines:
192.168.1.101 - Asterisk #1
+
* <tt>192.168.1.101 </tt>- Asterisk #1
192.168.1.106 - Asterisk #2
+
* <tt>192.168.1.106 </tt>- Asterisk #2
192.168.1.3  - Windows machine 1 (also running both VMware's for both Trixboxes)
+
* <tt>192.168.1.3  </tt>- Windows machine 1 (also running both VMware's for both Trixboxes)
192.168.1.189 - Laptop #1 running only X-lite
+
* <tt>192.168.1.189 </tt>- Laptop #1 running only X-lite
  
 
After capturing we filtered out other data to machines not on the local network (IP-adress other than 192.168.1.x), using this filter:
 
After capturing we filtered out other data to machines not on the local network (IP-adress other than 192.168.1.x), using this filter:
 
  ip.src >= 192.168.1.1 && ip.src <= 192.168.1.255 && ip.dst >= 192.168.1.1 && ip.dst <= 192.168.1.255
 
  ip.src >= 192.168.1.1 && ip.src <= 192.168.1.255 && ip.dst >= 192.168.1.1 && ip.dst <= 192.168.1.255
  
 +
= Analysis =
 
We did also do some [[Ethereal Analysis]] on the traffic during several conversations.
 
We did also do some [[Ethereal Analysis]] on the traffic during several conversations.

Revision as of 14:03, 30 January 2007

Ethereal is used to analyse the network traffic.

We captured the network data with the following machines:

  • 192.168.1.101 - Asterisk #1
  • 192.168.1.106 - Asterisk #2
  • 192.168.1.3 - Windows machine 1 (also running both VMware's for both Trixboxes)
  • 192.168.1.189 - Laptop #1 running only X-lite

After capturing we filtered out other data to machines not on the local network (IP-adress other than 192.168.1.x), using this filter:

ip.src >= 192.168.1.1 && ip.src <= 192.168.1.255 && ip.dst >= 192.168.1.1 && ip.dst <= 192.168.1.255

Analysis

We did also do some Ethereal Analysis on the traffic during several conversations.