Results 1 to 12 of 12

Thread: Wireshark

  1. #1
    Join Date
    Dec 2005
    Location
    San Jose, CA
    Posts
    465

    Wireshark

    Logging into an NAE3520 this morning and could not get in like I usually do. So a coworker introduced me to wireshark. Worked great. Lots of info(too much) but caught the ip address. You can use on specific protocals like Bacnet or Modbus. Anythoughts on wireshark??

  2. #2
    Join Date
    Apr 2007
    Location
    San Diego, CA
    Posts
    1,338

    Thumbs up

    Quote Originally Posted by blackbelt3677 View Post
    Logging into an NAE3520 this morning and could not get in like I usually do. So a coworker introduced me to wireshark. Worked great. Lots of info(too much) but caught the ip address. You can use on specific protocals like Bacnet or Modbus. Anythoughts on wireshark??
    very powerful network analyzer. known as ethereal prior to 2006 when the name was changed.
    http://en.wikipedia.org/wiki/Wireshark

    online wiki:
    http://wiki.wireshark.org/

    look for tutorials on youtube too

  3. #3
    Join Date
    Nov 2005
    Location
    Shreveport, Louisiana
    Posts
    2,329

    LOOK ATLAN

    I have found a network analyzer called "lookatlan".
    It is not as detailed as wireshark but it looks at the IP network you are on and gives all the IP address' on that network.
    Good for finding just the IP address and not all the other stuff you see with wireshark.

    It has saved me a lot especially when the IT people do not know what a static IP address is and give you a IP address in there DHCP server scheme, not paying attetention.

    Or when you have one of those NCE's that will not stay at a static IP and reverting to DHCP when you have a power failure with the Ethernet cable still hooked up.

    Google it and the best route to get it is the download.com site.

    Lookatlan.com is Italian
    It has an english language version but not from the italian site.
    Download.com lookatlan....
    UA Local 141

  4. #4
    Join Date
    Dec 2005
    Location
    San Jose, CA
    Posts
    465

    Thumbs up

    Cool I think Ill check it out. I am starting an NCE and NAE next week.

  5. #5
    Join Date
    Feb 2005
    Location
    Where it's dark & damp
    Posts
    609
    There is also a free tool called IP scan that one of the other techs found. You can set it for a range of IP address and it pings them to see if anything is out there. Sound similar to lookatlan .

  6. #6
    Join Date
    Apr 2005
    Location
    2444 Washington Blvd, Suite 100 Ogden, UT
    Posts
    362
    Quote Originally Posted by blackbelt3677 View Post
    Logging into an NAE3520 this morning and could not get in like I usually do. So a coworker introduced me to wireshark. Worked great. Lots of info(too much) but caught the ip address. You can use on specific protocals like Bacnet or Modbus. Anythoughts on wireshark??
    We use it all the time. It's a very powerful tool.
    Steve Jones
    Managing Partner
    The S4 Group, Inc.

  7. #7
    Join Date
    Nov 2005
    Location
    Shreveport, Louisiana
    Posts
    2,329
    Quote Originally Posted by willf650 View Post
    There is also a free tool called IP scan that one of the other techs found. You can set it for a range of IP address and it pings them to see if anything is out there. Sound similar to lookatlan .
    It is very familiar to lookatlan and they do basically the same things, but remember when you are pinging an address and do not find anything, you must remember that there may be a device such a backup server, on that IP and it is not active when you do your ping/scan but comes online in the middle of the night.
    UA Local 141

  8. #8
    Join Date
    Nov 2005
    Location
    Shreveport, Louisiana
    Posts
    2,329
    Quote Originally Posted by blackbelt3677 View Post
    Cool I think Ill check it out. I am starting an NCE and NAE next week.

    The issue with the NCE and reverting to DHCP is noted in FSC, not sure if it applies to NAE's
    UA Local 141

  9. #9
    Join Date
    Apr 2007
    Location
    San Diego, CA
    Posts
    1,338
    Quote Originally Posted by willf650 View Post
    There is also a free tool called IP scan that one of the other techs found. You can set it for a range of IP address and it pings them to see if anything is out there. Sound similar to lookatlan .
    Angry IP Scanner
    http://www.angryziber.com/w/Download

  10. #10
    Join Date
    Aug 2006
    Location
    Tennessee
    Posts
    462
    I have also used Wireshark, very powerful and FREE!
    He who asks a question is a fool for five minutes. He who does not ask any questions is a fool forever.

  11. #11
    Join Date
    Apr 2008
    Location
    UK
    Posts
    151
    I plugged my usb memory stick into a PC the other day and it kindly deleted my IPSCAN.EXE as it classed it as malware.
    -----------------------------------------------------
    Don't be a stupid dwarf. It's not big and it's not clever!

  12. #12
    Join Date
    Oct 2003
    Location
    Minnesota
    Posts
    1,380
    Quote Originally Posted by picnik View Post
    I plugged my usb memory stick into a PC the other day and it kindly deleted my IPSCAN.EXE as it classed it as malware.
    That is a problem one has to deal with these days.

    Altho, I've never had a PC delete the file on a USB stick. It only stopped any effort to copy said file to the PC itself, or to launch it.

    It can be a pain. Especially given that many virus scanners ID something as a virus or malware, which really is no such thing.

    The problem often is that it is something that HAS been known to be used by a hacker in the past. Or it is an app that contains a DLL, or some included function(s) that have been used in a Virus or malware in the past.

    Of course, this presents a problem in that many program functions, DLLs, resources, and such are used not only by hackers but also by legitimate programmers for legitimate apps.

    Sometimes yah have no alternative except to switch which app you're using and go with one the anti-virus/anti-malware scanner on the PC does not object to. That is, unless you're in a position, with the authority and permissions necessary, to instruct the scanner to make an exception of that particular app.

    But just because some particular anti-virus or anti-malware declared something to be a virus or malware, doesn't mean it really is.

    I've had to call the Norton Anti-virus people before and tell em that their program was erroneously identifying something as a virus ... and it wasn't. Took a few days, but finally they adjusted their database to take that app off their banned list.
    A site where I stash some stuff that might be interesting to some folks.
    http://cid-0554c074ec47c396.office.l...e.aspx/.Public

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Comfortech Show Promo Image

Related Forums

Plumbing Talks | Contractor Magazine
Forums | Electrical Construction & Maintenance (EC&M) Magazine
Comfortech365 Virtual Event