Re: [Ethereal-users] lan configuration for ethereal

[Hansang Bae <hbae@xxxxxxxxxx>]

On 02:50 PM 6/2/2005, B MCC wrote:
>[snip: virus slamming the GW. Internet traffic slowed to a crawl]
>I finally discovered the "show ip
>nat translation" on the cisco router and that pointed
>out the machine that the requests were coming from.
>Could there have been a way to find this problem using
>ethereal in our current configuration ? 


Sure.  You could have spanned the router's Ethernet port (your GW) and would have seen significant traffic due to the virus.  

hsb