Page 2 of 2 FirstFirst 12
Results 11 to 13 of 13

Thread: DCERPC packets to Rythmbox Radio

  1. #11
    Join Date
    Apr 2011
    Beans
    207
    Distro
    Ubuntu 10.04 Lucid Lynx

    Re: DCERPC packets to Rythmbox Radio

    Quote Originally Posted by OpSecShellshock View Post
    It might be easier to get a handle on things if you can try to reproduce the issue by accessing the station again while running Wireshark, but over a shorter period of time. My general feeling is that this is most likely perfectly normal, but it's hard to say without the captures.
    That sounds like a good idea to me.

    I did another 2 hour 15 minutes listening to the same radio station on Sunday afternoon. ( when America is in bed ). I checked the expert info after 1 hour 45 mins of capture and had NO malformed packets and NO packets listed as DCERPC packets.

    Total captured packets from the same radio station during this time was 644,000 packets.

    Stats on this data were:

    Previous segment lost > 3414 counts
    Out of order segments > 206 counts
    Fast retransmissions > 1965 counts

    Wireshark was seriously struggling at 2 hour 15 minutes of capture. The live capture display window was 17 minutes behind the actual time. It took another 17 minutes or so to stop the capture after I hit the stop capture command. I aborted the save command since my computer was struggling doing the save. The file created was over 226MB in size.

    Looks like my computer needs more memory

    My conclusions are that the original DCERPC packets are to be treated as suspect but I doubt if they were the actual cause of Wireshark crashing. I reckon that was down to the original capture file being too large.
    You can take my trousers but you won't take my Freedom !

  2. #12
    Join Date
    Feb 2011
    Beans
    492
    Distro
    Ubuntu

    Re: DCERPC packets to Rythmbox Radio

    Quote Originally Posted by SparTacux View Post

    Looks like my computer needs more memory
    Just out of curiosity,... how much RAM have you got?

  3. #13
    Join Date
    Apr 2011
    Beans
    207
    Distro
    Ubuntu 10.04 Lucid Lynx

    Re: DCERPC packets to Rythmbox Radio

    Quote Originally Posted by Dry Lips View Post
    Just out of curiosity,... how much RAM have you got?
    This computer is an old Dinosaur - 400MB RAM.
    I Reckon I can get the latest version of Windows to run on it

    Come to think of it I probably need a new computer !
    And a IDS intrusion system, and a more advanced router Firewall and employ a pro IT security expert.
    Last edited by SparTacux; May 23rd, 2012 at 08:36 PM.
    You can take my trousers but you won't take my Freedom !

Page 2 of 2 FirstFirst 12

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •