wireshark not complete ?

dschinn1001

In Ubuntu and in Antix there is portscan visible in wireshark as follows :

169902 6828.727582565 CrayComm_11:39:96 45:10:01:48:00:00 0x0000 344 Ethernet II

Why is Cray Computer not visible in Solus, when wireshark is running there ?!

dschinn1001

Sorry, I did not want to appear impossible or similiar. It is just, because it is an important entry of a Cray Computer, which remains invisible in Solus. This Cray seem to come from London. But more is not to find out. I only wanted to know, why it was invisible here ?! (Seems to be a machine of gov ... )

DataDrake

dschinn1001 You aren't reading this output correctly. "CrayComm_11:39:96" is a MAC address starting with 00:00:80 and ending with 11:39:96, put together as 00:00:80:22:39:96. This is just wireshark trying to be clever because many hardware vendors use a fixed sequence at the start of their MAC addresses. Examples: https://gist.github.com/aallan/b4bb86db86079509e6159810ae9bd3e4

Honestly dude, you need to quit being so paranoid. You immediately jump to the conclusion that someone is poking around your machine that shouldn't be, and to date that hasn't proven to be true even once.

dschinn1001

DataDrake Where do you have this list from ?! I want to copy it into txt-file ... this seem not to work here ?! ...

dschinn1001

Yes thank you, you are right. I should not to assume too quickly something suspicious looking after a certain conspiracy in Linux machine. But I was thinking that a Cray Computer is nothing unexceptional. Well, in future I try not to aussume too quickly ...

SOLUSfiddler

dschinn1001
At the bottom of the list click on VIEW RAW, copy, then paste into document.
Took me 5 seconds, it's over 360 pages long (in A4).
😂

SOLUSfiddler

Anyway, an impressive list all the same!

dschinn1001

SOLUSfiddler thx.

dschinn1001

dschinn1001 360 pages ... new tapestry.