Ethereal-dev: Re: [ethereal-dev] packet capture from switches and other RMON devices

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gilbert Ramirez <gram@xxxxxxxxxx>
Date: Wed, 12 May 1999 08:09:35 -0500
On Wed, May 12, 1999 at 04:08:28AM -0500, guy@xxxxxxxxxx wrote:
> 
> so, in theory, an RMON-capable device could allow you to do packet
> capture using the RMON MIB.
> 
> I've yet to actually see such a device, however; a while ago, I
> experimented with one of our SNMP-capable switches, but I was unable to
> provoke it to let me do anything - that may just mean I was doing it
> wrong.

I have used such a device successfully. At my previous job we used Bay
Networks (ummm, now Nortel) Token-Ring MAUs. I think "LattisRing" was
the product name. I was using their management app which sits on top of
OpenView (or NetView/Tivoli on AIX).

 
>         if ((a & mask) == (b & mask))
>                 save the packet
> 
> - but it probably can catch the most interesting cases.

It _is_ a very simple filtering mechanism and pretty much kept me to
filtering on the datalink-layer info (MAC addresses). But it got the
jobs done.

--gilbert