This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Please help me as I'm fairly new to this type of thing. I have a Windows 7 laptop and I need to use a cross-over cable to connect to another device via FTP. I need to download firmware to the memory of that device. Any way, the FTP of that device is unknown. Can I use Wireshark to capture that IP address so that I can setup the ethernet network and then use my cross-over cable to connect and make the needed file transfer? If anyone can help please list the steps in detail on how I do this. I downloaded Wireshark ver 1.8.3, but I'm not really sure where to begin. I did click the START button and I checked all the available capture devices but there is so much scrolling and so many IPs I'm lost at this point.

Thanks for any guidance you can provide.

Regards,

Bill.

asked 13 Nov '12, 08:22

semiturbo's gravatar image

semiturbo
1112
accept rate: 0%


If you at least know the MAC address of the interface of the device you want to FTP to, that would help. Anyway, you could setup your cross-over cable right away and have a look with Wireshark what comes up on the laptop. That would keep out all the other traffic.

If the device gets its IP address dynamically, then it probably falls back to a default when no DHCP server is around. Maybe you need to powercycle the device to trigger it to send something, or use a broadcast ping to poke it for an ARP response. This should tell you something about its IP address

permanent link

answered 13 Nov '12, 09:02

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

Thank you. The MAC Address I found on a chip shows to be 00-60-A9-00-08-80. What would I do ith that information to help me? How do a do a broadcast ping? I assume I do this from CMD prompt but not sure what the procedure is. Sorry, I'm pretty much a novice at this.

(13 Nov '12, 09:14) semiturbo

I tried another laptop (Windows XP) and got a smaller list of information from Wireshark. When I power cycled the unit the first numbers that came up were 0.0.0.0 255.255.255.255. Looks like the IP address is not setup on the unit I'm trying to connect to. If I know the MAC Address is there a way for me to set the IP address so I can then connect to it? Thanks.

(13 Nov '12, 10:26) semiturbo

Ok, so your device needs a DHCP server. Well then, have Wireshark capture the network interface, powercycle the device and use the following display filter: eth.addr == 00:60:A9:00:08:80. You probably see an ARP request for the IP address it's assigned.

(13 Nov '12, 14:07) Jaap ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×87
×56
×29
×7
×1

question asked: 13 Nov '12, 08:22

question was seen: 3,197 times

last updated: 13 Nov '12, 14:07

p​o​w​e​r​e​d by O​S​Q​A