Ethereal-dev: Re: [ethereal-dev] packet capture from switches and other RMON devices

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Gilbert Ramirez <gram@xxxxxxxxxx>
Date: Wed, 12 May 1999 16:57:19 -0500
On Wed, May 12, 1999 at 04:47:51PM -0500, guy@xxxxxxxxxx wrote:
> 
> 
> > It _is_ a very simple filtering mechanism and pretty much kept me to
> > filtering on the datalink-layer info (MAC addresses).
> 
> It could also filter on other fields *if* there aren't any packets with
> variable-length headers (Token Ring with source routing, IP or TCP with
> options) - I'm not sure that the filter-expression parser in "libpcap"
> handles those either.

libpcap does not handle token-ring source-routing well. It assumes a
fixed length 802.5 header. 

--gilbert