- Community Home
- >
- Networking
- >
- Legacy
- >
- Switches, Hubs, Modems
- >
- Re: IPX SA General Query
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО02-14-2007 08:36 PM
тАО02-14-2007 08:36 PM
I started having a look at wire Shark recently just running from my PC and it looks like there are a lot of IPX SA General Query packets running round out network. on further investagation it seems that these broadcasts are coming from my HP switches. I was under the impression that I was just running IP on these devices. when I try and do a show IPX the commanad is invallid.
Is this normal or is there any way to check whats happening. All our devices should just have just IP enabled.
thanks
Ronnie
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО02-14-2007 09:24 PM
тАО02-14-2007 09:24 PM
Re: IPX SA General Query
Is it definately the switches that are generating the traffic? Is there a possibility that you have some old HP network printers running that could possibly be the cause.
I have seen similar things in a network before, another thing we had was Windows clients that had NWLINK installed.
It is worth checking Printers etc. just to make sure that IPX is disabled if you are not usig it.
Cheers
Jonboy
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО02-14-2007 09:50 PM
тАО02-14-2007 09:50 PM
Re: IPX SA General Query
I agree with Jonathan, i saw that before, its most probably a client has NWLINK protocol installed.
I think what got you confused is that you saw in Wireshark in the Source field, HewlettP_ (last mac portion), and i think it something made by HP and has this protocol broadcasting all over the network.
Good Luck !!!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО02-14-2007 10:06 PM
тАО02-14-2007 10:06 PM
Re: IPX SA General Query
that could be it, wireshark virgin.
There are a lot of HP printer's floating about and some 98 clients.
Is there any way I can identify these devices from wireshark ?
Ron
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО02-14-2007 10:17 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО02-14-2007 10:41 PM
тАО02-14-2007 10:41 PM
Re: IPX SA General Query
Yea
thats my problem Im not sure were to find the MAC were the packet orgionates.
I seem to be reading the switch MAC's from the packet ...and when I search for any of these MAC's in PCM it is matching a switch.
?
ROn
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО02-14-2007 11:12 PM
тАО02-14-2007 11:12 PM
Re: IPX SA General Query
If you have access to any of the printers it is probably worthwhile either using telnet / Http access to the printer or visitng the printer itself to see if the IPX protocol is enabled.
You should be able to see from Wireshark the Source MAC address of any clients that are running NWLINK and use the show arp as suggested... It seems unusual that all of the source addresses should be that of the switch.... Will continue thinking!!!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО02-14-2007 11:22 PM
тАО02-14-2007 11:22 PM
Re: IPX SA General Query
Just looked in Web Jet Admin and most of the printers have an IPX name and protocol assigned to them,
will further investagate this
cheers for the help
Ron