Snort mailing list archives

Can Snort report on 'late collisions'?


From: Bryce Stenberg <bryce () hrnz co nz>
Date: Tue, 25 Nov 2003 09:37:13 +1300

Hi,

I've got a problem on our network where a router log shows it's ethernet
connection is being reset often due to 'late collisions'. Searching google
seemed to indicate a computer connected to it may have a faulty network card
so I need to try to find the offending machine.

Is there anyway I could use snort (or winpcap) to detect/report on these
late collisions? (even to only show if they are happening or not).  Or is it
not possible as packets get discarded by the hardware?

Thanks for any help.

Regards,
  Bryce Stenberg
 (Harness Racing New Zealand computer dept.) 


DISCLAIMER:  http://www.hrnz.co.nz/eDisclaimer.htm  



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?  SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: