This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Mitel phone plugged into jack, my pc plugged into phone. I don't have the phone setup for mirroring as I wasn't capturing voice packets. I ran WS and was investigating another issue when I found a bunch of TCP packets coming from the Mitel PBX destined to other phones. How and why would I be seeing this? I understand I would see broadcast messages as my phone is on the same vlan but direct conversations between devices that my equipment is not involved in?

thanks,

asked 10 Mar '17, 07:55

rock90's gravatar image

rock90
21111115
accept rate: 0%

It's hard to say without seeing a capture file. Can you leave one in a publicly downloadable location such as Dropbox or Google Drive?

(10 Mar '17, 21:01) Rooster_50

It's a bit hard to give an answer without a good understanding of the network topology and state of the upstream L2 network in particular, but if you're seeing destination MAC addresses other than those served by your phone or your PC there are a few possibilities. One is the presence of a hub in the network. Another is that MAC learning has been disabled on the VLAN (causing an L2 switch to treat these as broadcasts, never learning the specific destination port to forward to).

(11 Mar '17, 22:43) Quadratic
Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×122
×115
×23
×21
×8

question asked: 10 Mar '17, 07:55

question was seen: 709 times

last updated: 11 Mar '17, 22:43

p​o​w​e​r​e​d by O​S​Q​A