Hi!
I'm trying to connect to a Siemens plc cpu, but i can't. When I'm using a computer with windows xp i can see alot of PN-MRP traffic with wireshark but in my windows 7 computer i can't see the PN-MRP traffic. Is there some kind of filter or firewall in windows 7 that removes this kind of traffic?
//Nonne
Welcome to the Seven Forums.
Do you know if the W7 computer has network adapter drivers that allow the adapter to go into the promiscuous mode? It has been a long time since I've used Wireshark and I do not recall if it warns you that it cannot put the adapter into that mode.
Thank you :)
I'm not sure. But i can se other traffic like html and when the plc boots up I can se that it's sending ARP-requests. I have tried a USB-ethernet card in an virtual xp computer on my w7 machine and I can see this PN-MRP traffic, but when I connect it to my w7 machine i can't see the PN-MRP traffic. When i did this i used the same version number of the driver but xp x32 in the virtual machine and vista x64 in my w7 machine. Wireshark hasn't warned me about any problems.
Are you using Microsoft's XP Mode or VirtualBox or VMware or.... for the virtualization of XP? I've wondered how well these VM tools pass USB stuff on to the virtual OS. It appears that the XP drivers let you see more than the W7 ones do.
I'll ask others to stop by your thread.
I'm using VMware! I have never had any problems with usb products in VMware as long as the right driver is installed and the usb product is connected to the virtual machine :)
Thank you!
I wonder what you would see if you used a Virtual Machine running W7. That VM would probably be using different W7 drivers than the drivers in use by the host W7 OS. If you need a W7 ISO, see step one of this tutorial:
Clean Install Windows 7
I installed w7 in a virtual machine! When i looked at my standard ethernet card i saw the same traffic as in my w7 computer. But when i connected the usb-ethernet card and installed the same driver as in my w7 computer i saw the PN-MRP traffic.
Hmmm, that is a bit unexpected.
When I said, "That VM would probably be using different Windows 7 drivers than the drivers in use by the host Windows 7 OS", I was thinking of how VirtualBox (VB) handles network adapters. In my case, the host laptop's Wi-Fi is the main connection to a network, but the VM OS uses drivers for an Intel PRO/1000MT Desktop (82540EM). I can select other network adapters to be emulated too. But if I added a USB NIC, I probably would have to install an additional driver to the VB VM just like you did.
All I can think of to explain the difference between the Wireshark captures of the W7 host and those of the W7 VM is 3rd party software. What antivirus tool are you using on the host? What happens if you install that AV tool into the VM?
I don't understand what LSPs are, but I've run into some programs that won't work well together because of conflicts in the way LSPs are used within each app. Maybe some 3rd party software that is installed on the W7 host is filtering the traffic on any NIC being used.
I'm not familiar with VMware, but I assume that it installs one or more virtual NICs on the host computer. That virtual NIC might not be subject to the same LSP filters. The only way that I can explain the differences that you are seeing between the Ethernet NIC and the USB NIC inside the VM is - the VMware drivers might use more of a pass-thru for data for the Ethernet NIC - thus you are seeing the same poor Wireshark results.
These questions might best be handled in the forums for Wireshark and/or VMWare. If you happen to pursue the issue in one or both of those forums, kindly post a link to your thread(s) so that others finding this thread can complete the journey with you.
I've found the problem! It was the antivirus/firewall. I made exceptions and turned it off a while ago, but it didn't help. But as soon as I installed it in my virtual computer the PN-MRP traffic dissapeared from my USB-ethernet adapter.
Thank you alot for your time!
You are welcome and thanks for posting back with the solution.
Quote