Hey all, I did a scan yesterday and I’m a little discouraged by what I’m seeing. I did a quick scan that rounded up 85,541 packets and of those packets 21,148 are Out-of-Order packets (expert.message == “Out-Of-Order segment”). From what I can see several of the machines on my network are producing these packets. some of the protocols are TCP, HTTP, SMB, TDS and DCERPC. I tried Googling this issue and saw that capturing packets from a mirrored port can do this. Well, how do I capture packets on my network without mirroring a port or ports? I’m pretty new to packet sniffing so please keep advanced technical terms to a minimum. :oops:
Thanks,
Joe B