IWETHEY v. 0.3.0 | TODO
1,095 registered users | 0 active users | 0 LpH | Statistics
Login | Create New User
IWETHEY Banner

Welcome to IWETHEY!

IWETHEY Home / IWETHEY Board / Security Forum / Similarly, ...
Post #438,439
by Another Scott
2/20/21 10:12:42 AM
2/20/21 10:12:42 AM
Reply
New Similarly, ...
I was trying to figure out some networking issue at work and decided to look at the Windows traffic. I was flabbergasted by what I saw.

Very roughly:

Joe's PC - "I'm here. Anyone out there?"
Jacks's PC - "I'm here. Anyone out there?"
Jane's PC - "I'm here. Anyone out there?"
Bob's PC - "I'm here. Anyone out there?"
Joe's PC - "I'm here. Anyone out there?"
Jacks's PC - "I'm here. Anyone out there?"
Jane's PC - "I'm here. Anyone out there?"
Bob's PC - "I'm here. Anyone out there?"
Joe's PC - "I'm here. Anyone out there?"
Jacks's PC - "I'm here. Anyone out there?"
Jane's PC - "I'm here. Anyone out there?"
Bob's PC - "I'm here. Anyone out there?"

It was amazing that there was any bandwidth left with all the chatter. :-/

Yeah, it's great that the pointy-clicky tools are out there, but if one doesn't know what normal looks like it can be overwhelming.

Cheers,
Scott.
Post #438,445
by boxley
2/20/21 4:53:12 PM
2/20/21 4:53:12 PM
Reply
New very normal
"Science is the belief in the ignorance of the experts" – Richard Feynman
Post #438,446
by Another Scott
2/20/21 5:05:22 PM
2/20/21 5:05:22 PM
Reply
New Yeah.
I neglected to mention that this was way back when I was running OS/2.

:-)

Still, normal. But I was surprised.

Cheers,
Scott.
Post #438,447
by crazy
2/20/21 5:10:13 PM
2/20/21 5:10:13 PM
Reply
New Yeah we both reacted like that
Those were standard arp announcements. When you see them on a tiny little network for the first time it's easy to absorb them and understand why it was reasonable in those days. But then when you see them on a monster network and you realize the amount of background chatter going on at all times you realize you are really happy that wire shark has colored tracking to separate the conversations.
Post #438,448
by pwhysall
Picture of pwhysall
2/21/21 5:23:18 AM
2/21/21 5:23:18 AM
Reply
New It's almost as if...
...the amount of network traffic on a corporate network is much larger than human brainmeats are able to comfortably conceptualise in real-time.

They're NETBIOS browser announcements. A few bytes, per machine, every few seconds. Basically non-existent, in the context of a 100 megabit or better network. Then there's ARP, and DHCP, and this and that and and the other.
Post #438,450
by crazy
2/21/21 11:36:31 AM
2/21/21 11:36:31 AM
Reply
New That goes under the heading of : holy s***
All those protocols that developed over all those years that aggregated into the pipes that we have to f****** figure out right now.

yeah, you know it simply doesn't work for human brains to be able to absorb all the crap at once. I'm almost happy I don't work in that environment.
Post #438,478
by static
2/23/21 6:46:18 PM
2/23/21 6:46:18 PM
Reply
New Yah. NetBIOS has a reputation for being very chatty.
     FFS Ashton - (rcareaga) - (21) - Feb. 17, 2021, 10:17:18 PM EST
         buy a $9 crap usb keyboard problem solved -NT - (boxley) - Feb. 17, 2021, 11:39:44 PM EST
         There's insufficient brains on the keyboard to do it - (pwhysall) - Feb. 18, 2021, 02:15:18 AM EST
         Process IDs - (scoenye) - (12) - Feb. 18, 2021, 07:19:01 PM EST
             I’ll pass this on to him - (rcareaga) - (11) - Feb. 19, 2021, 10:27:00 AM EST
                 This reminds me of - (crazy) - (9) - Feb. 19, 2021, 10:36:24 AM EST
                     Yes and no - (drook) - (1) - Feb. 19, 2021, 02:05:42 PM EST
                         No idea. 20 plus years ago -NT - (crazy) - Feb. 19, 2021, 04:49:31 PM EST
                     Similarly, ... - (Another Scott) - (6) - Feb. 20, 2021, 10:12:42 AM EST
                         very normal -NT - (boxley) - (2) - Feb. 20, 2021, 04:53:12 PM EST
                             Yeah. - (Another Scott) - Feb. 20, 2021, 05:05:22 PM EST
                             Yeah we both reacted like that - (crazy) - Feb. 20, 2021, 05:10:13 PM EST
                         It's almost as if... - (pwhysall) - (2) - Feb. 21, 2021, 05:23:18 AM EST
                             That goes under the heading of : holy s*** - (crazy) - Feb. 21, 2021, 11:36:31 AM EST
                             Yah. NetBIOS has a reputation for being very chatty. -NT - (static) - Feb. 23, 2021, 06:46:18 PM EST
                 End users should never look at system log files - (pwhysall) - Feb. 19, 2021, 12:03:27 PM EST
         Most likely unrelated, but you did say "new". - (mmoffitt) - (5) - Feb. 22, 2021, 07:15:26 AM EST
             Saw that, but… - (rcareaga) - (4) - Feb. 23, 2021, 01:44:03 PM EST
                 Bummer. - (Another Scott) - (3) - Feb. 23, 2021, 06:28:06 PM EST
                     Images - (rcareaga) - Feb. 23, 2021, 06:48:21 PM EST
                     OT: broken images - (static) - (1) - Feb. 23, 2021, 06:49:22 PM EST
                         Ah. Thanks. -NT - (Another Scott) - Feb. 24, 2021, 12:04:05 AM EST

Oh look... it's a dork!
95 ms