![]() From the client I captured a successful resolve request, but I think I see the problem. ![]() I using MS Network Monitor before a friend told me about Wireshark. Once the ARP request comes back with the MAC address, the client uses that address for the DNS query. ![]() as I understand a DNS inquiry, the first thing that happens is that the client makes an ARP request on the IP address of the DNS server. This way, the IP stack would get the packet through one NIC or the other, and as it doesn't (and actually cannot) check whether IP and MAC addresses match each other, it would process it in any case. It should be enough to enable the 2nd NIC, give it an IP address from the same subnet like the other one, and connect it to the switch. If the above fails, the next step would be to try the BIOS, and if BIOS would not offer any means to disable the card, we'd have to invert the strategy. the cable is not connected) or "disabled" in Windows? Go to the "Center for networking" window and look whether the unused NIC is in full colour or grayscale if in full colour, right-click it and choose "disable", then try again (but bear in mind that the records in ARP tables have expiration time of minutes so don't try too quickly) I don't know any "standard" solution, and I still don't know what exactly happens.Ĭan you confirm that the other MAC you can see with my display filter is really the MAC of the other NIC? It is not clear from what you wrote so far.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |