Please help me as I'm fairly new to this type of thing. I have a Windows 7 laptop and I need to use a cross-over cable to connect to another device via FTP. I need to download firmware to the memory of that device. Any way, the FTP of that device is unknown. Can I use Wireshark to capture that IP address so that I can setup the ethernet network and then use my cross-over cable to connect and make the needed file transfer? If anyone can help please list the steps in detail on how I do this. I downloaded Wireshark ver 1.8.3, but I'm not really sure where to begin. I did click the START button and I checked all the available capture devices but there is so much scrolling and so many IPs I'm lost at this point. Thanks for any guidance you can provide. Regards, Bill. asked 13 Nov '12, 08:22  semiturbo |
One Answer:
If you at least know the MAC address of the interface of the device you want to FTP to, that would help. Anyway, you could setup your cross-over cable right away and have a look with Wireshark what comes up on the laptop. That would keep out all the other traffic. If the device gets its IP address dynamically, then it probably falls back to a default when no DHCP server is around. Maybe you need to powercycle the device to trigger it to send something, or use a broadcast ping to poke it for an ARP response. This should tell you something about its IP address answered 13 Nov '12, 09:02  Jaap ♦ |
Thank you. The MAC Address I found on a chip shows to be 00-60-A9-00-08-80. What would I do ith that information to help me? How do a do a broadcast ping? I assume I do this from CMD prompt but not sure what the procedure is. Sorry, I'm pretty much a novice at this.
I tried another laptop (Windows XP) and got a smaller list of information from Wireshark. When I power cycled the unit the first numbers that came up were 0.0.0.0 255.255.255.255. Looks like the IP address is not setup on the unit I'm trying to connect to. If I know the MAC Address is there a way for me to set the IP address so I can then connect to it? Thanks.
Ok, so your device needs a DHCP server. Well then, have Wireshark capture the network interface, powercycle the device and use the following display filter: eth.addr == 00:60:A9:00:08:80. You probably see an ARP request for the IP address it's assigned.