On 2021-09-12 4:27 p.m., Douglas McGarrett wrote:
OK, zypper installed it, in spite of the Firefox entry. But I don't know how to use it! I entered the MAC address, but then what?
I assume you only have 1 interface. If not, select the appropriate one. Then, in the long box "using this filter" enter ether host <MAC address>. Here's an example "ether host e0:37:17:cf:b7:52". Then, with the cursor in that long box, press Enter. You should now see the captures if printing is occurring. It will list both source and destination IP addresses. This is assuming there is no router between the computer and printer. What's this about Firefox? It has nothing to do with Wireshark.
On 2021-09-12 4:39 p.m., James Knott wrote:
I assume you only have 1 interface. If not, select the appropriate one. Then, in the long box "using this filter" enter ether host <MAC address>. Here's an example "ether host e0:37:17:cf:b7:52". Then, with the cursor in that long box, press Enter. You should now see the captures if printing is occurring. It will list both source and destination IP addresses. This is assuming there is no router between the computer and printer.
In your case, it would be ether host A4:EE:57:73:CB:85.
On 9/12/21 4:44 PM, James Knott wrote:
On 2021-09-12 4:39 p.m., James Knott wrote:
I assume you only have 1 interface. If not, select the appropriate one. Then, in the long box "using this filter" enter ether host <MAC address>. Here's an example "ether host e0:37:17:cf:b7:52". Then, with the cursor in that long box, press Enter. You should now see the captures if printing is occurring. It will list both source and destination IP addresses. This is assuming there is no router between the computer and printer.
In your case, it would be ether host A4:EE:57:73:CB:85. I thought I had made clear that this is on a lan. It goes thru an eight-port D-LINK router, as does everything else. I have tried the MAC address with capital letters as you show, and with small letters, as one of the other correspondents shows, but it bombs either way. --doug
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 El 2021-09-12 a las 17:21 -0400, Douglas McGarrett escribió:
On 9/12/21 4:44 PM, James Knott wrote:
On 2021-09-12 4:39 p.m., James Knott wrote:
I assume you only have 1 interface. If not, select the appropriate one. Then, in the long box "using this filter" enter ether host <MAC address> . Here's an example "ether host e0:37:17:cf:b7:52". Then, with the cursor in that long box, press Enter. You should now see the captures if printing is occurring. It will list both source and destination IP addresses. This is assuming there is no router between the computer and printer.
In your case, it would be ether host A4:EE:57:73:CB:85. I thought I had made clear that this is on a lan. It goes thru an eight-port D-LINK router, as does everything else. I have tried the MAC address with capital letters as you show, and with small letters, as one of the other correspondents shows, but it bombs either way.
Please forget wireshark, it is *too dificult* for you. Don't waste time with it. You have the needed information in that paper you printed. - -- Cheers Carlos E. R. (from openSUSE 15.2 (Legolas)) -----BEGIN PGP SIGNATURE----- iHoEARECADoWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCYT5wQBwccm9iaW4ubGlz dGFzQHRlbGVmb25pY2EubmV0AAoJELUzGBxtjUfVkUUAnAvj504Hlq8jQHPvp1g1 FmC2UxkBAKCRc7rUeluSlH5hOTSrynxq0oBvVg== =EO9e -----END PGP SIGNATURE-----
On 2021-09-12 5:21 p.m., Douglas McGarrett wrote:
On 9/12/21 4:44 PM, James Knott wrote:
On 2021-09-12 4:39 p.m., James Knott wrote:
I assume you only have 1 interface. If not, select the appropriate one. Then, in the long box "using this filter" enter ether host <MAC address>. Here's an example "ether host e0:37:17:cf:b7:52". Then, with the cursor in that long box, press Enter. You should now see the captures if printing is occurring. It will list both source and destination IP addresses. This is assuming there is no router between the computer and printer.
In your case, it would be ether host A4:EE:57:73:CB:85. I thought I had made clear that this is on a lan. It goes thru an eight-port D-LINK router, as does everything else. I have tried the MAC address with capital letters as you show, and with small letters, as one of the other correspondents shows, but it bombs either way. --doug
You normally use Wireshark on a LAN. You have an Ethernet port on your computer and one on the printer. You then have cables and a switch in between. That makes a LAN. As long as there isn't a router in the way, you're fine. Also, it makes no difference whether upper or lower case letters are used. So, are you saying that if you open Wireshark, enter ether host <MAC address> in that long box it "bombs"? That is something I do all the time and have never seen it bomb. If your computer is printing and that printer is responding, then Wireshark should capture it. That is unless you're connected with USB, in which case you won't see anything. As an experiment, try the MAC for your computer. You will then see everything your computer is doing. If you still don't see anything, then you're doing something wrong.
On 9/12/21 5:42 PM, James Knott wrote:
On 2021-09-12 5:21 p.m., Douglas McGarrett wrote:
On 9/12/21 4:44 PM, James Knott wrote:
On 2021-09-12 4:39 p.m., James Knott wrote:
I assume you only have 1 interface. If not, select the appropriate one. Then, in the long box "using this filter" enter ether host <MAC address>. Here's an example "ether host e0:37:17:cf:b7:52". Then, with the cursor in that long box, press Enter. You should now see the captures if printing is occurring. It will list both source and destination IP addresses. This is assuming there is no router between the computer and printer.
In your case, it would be ether host A4:EE:57:73:CB:85. I thought I had made clear that this is on a lan. It goes thru an eight-port D-LINK router, as does everything else. I have tried the MAC address with capital letters as you show, and with small letters, as one of the other correspondents shows, but it bombs either way. --doug
You normally use Wireshark on a LAN. You have an Ethernet port on your computer and one on the printer. You then have cables and a switch in between. That makes a LAN. As long as there isn't a router in the way, you're fine. Also, it makes no difference whether upper or lower case letters are used.
So, are you saying that if you open Wireshark, enter ether host <MAC address> in that long box it "bombs"? That is something I do all the time and have never seen it bomb. If your computer is printing and that printer is responding, then Wireshark should capture it. That is unless you're connected with USB, in which case you won't see anything.
As an experiment, try the MAC for your computer. You will then see everything your computer is doing. If you still don't see anything, then you're doing something wrong. I'm doing something wrong. I believe I have the MAC address of this computer and I still get the same error from wireshark. But there IS a router in the path, as I said above. --doug
On 2021-09-12 7:37 p.m., Douglas McGarrett wrote:
I'm doing something wrong. I believe I have the MAC address of this computer and I still get the same error from wireshark. But there IS a router in the path, as I said above.
I just tried it with "ether host A4:EE:57:73:CB:85", that is your printer MAC address in that box. It started normally, as I expected. Of course, it didn't capture anything, as your printer is not on my network. So, it should not be generating any error. You can use any MAC address and it should still work. You just won't capture anything that's not on your network. Another thing you can try is to put nothing in that box and just hit enter, after you ensure you're on the right interface. It will then capture everything, and I mean everything, not just IP, that's passing through your network connection.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Content-ID: <426e42c9-3119-c1d4-d970-b669e88ada4@Legolas.valinor> El 2021-09-12 a las 19:48 -0400, James Knott escribió:
On 2021-09-12 7:37 p.m., Douglas McGarrett wrote:
I'm doing something wrong. I believe I have the MAC address of this computer and I still get the same error from wireshark. But there IS a router in the path, as I said above.
I just tried it with "ether host A4:EE:57:73:CB:85", that is your printer MAC address in that box. It started normally, as I expected. Of course, it didn't capture anything, as your printer is not on my network. So, it should not be generating any error. You can use any MAC address and it should still work. You just won't capture anything that's not on your network. Another thing you can try is to put nothing in that box and just hit enter, after you ensure you're on the right interface. It will then capture everything, and I mean everything, not just IP, that's passing through your network connection.
James, to what purpose? We already know the IP of the printer. It is printed in paper, the status page of the printer. And it doesn't work because it is on a different segment, no route. - -- Cheers Carlos E. R. (from openSUSE 15.2 (Legolas)) -----BEGIN PGP SIGNATURE----- iHoEARECADoWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCYT6TfRwccm9iaW4ubGlz dGFzQHRlbGVmb25pY2EubmV0AAoJELUzGBxtjUfVht0AnAm8tI+/H9yxLoptKUUG VBg7AiZFAJwKrYSfEBg2RvjdTaf2FHT2BpvC2g== =9OBw -----END PGP SIGNATURE-----
On 9/12/21 7:48 PM, James Knott wrote:
On 2021-09-12 7:37 p.m., Douglas McGarrett wrote:
I'm doing something wrong. I believe I have the MAC address of this computer and I still get the same error from wireshark. But there IS a router in the path, as I said above.
I just tried it with "ether host A4:EE:57:73:CB:85", that is your printer MAC address in that box. It started normally, as I expected. Of course, it didn't capture anything, as your printer is not on my network. So, it should not be generating any error. You can use any MAC address and it should still work. You just won't capture anything that's not on your network. Another thing you can try is to put nothing in that box and just hit enter, after you ensure you're on the right interface. It will then capture everything, and I mean everything, not just IP, that's passing through your network connection.
I don't know why it doesn't work, but on the advice of Carlos, I will forget about it. Thanx anyway--not your fault it's hose here. --doug
On 9/12/21 4:39 PM, James Knott wrote:
On 2021-09-12 4:27 p.m., Douglas McGarrett wrote:
OK, zypper installed it, in spite of the Firefox entry. But I don't know how to use it! I entered the MAC address, but then what?
I assume you only have 1 interface. If not, select the appropriate one. Then, in the long box "using this filter" enter ether host <MAC address>. Here's an example "ether host e0:37:17:cf:b7:52". Then, with the cursor in that long box, press Enter. You should now see the captures if printing is occurring. It will list both source and destination IP addresses. This is assuming there is no router between the computer and printer. I tried it again using lower-case letters and got the same result.
What's this about Firefox? It has nothing to do with Wireshark. I went to Firefox to find Wireshark and got a "one-click install" which told me that there is no version for Leap 15.3, and when I tried to install anyway it wouldn't let me. --doug
On 2021-09-12 5:02 p.m., Douglas McGarrett wrote:
What's this about Firefox? It has nothing to do with Wireshark. I went to Firefox to find Wireshark and got a "one-click install" which told me that there is no version for Leap 15.3, and when I tried to install anyway it wouldn't let me.
Use Yast > Software Management, as I mentioned in another note.
participants (3)
-
Carlos E. R. -
Douglas McGarrett -
James Knott