Ethereal-dev: RE: [ethereal-dev] packet capture from switches and other RMON devices
>>so, in theory, an RMON-capable device could allow you to do packet
>>capture using the RMON MIB.
The gotcha there is the RMON RFC's do not require a device to implement ALL
the elements of RMON in order to be RMON compatible. So many vendors "pick
and choose" among the groups and only implement the ones which are relevant
to their device and easy to do. (There are a few groups that are mandatory
for RMON compliance, of course).
Naturally since capturing packets is CPU-intensive and requires having
enough memory to store them, *most* devices which claim to be RMON
compatible do NOT implement the filter and capture groups.
Personally, I've yet to lay my hands on an RMON device that can do
capturing, but I haven't been actively looking for one.
I think the idea of plugging that in as an alternate packet source for
ethereal is a great one, however!
=====================================
Tim Farley
Software Engineer
tfarley@xxxxxxx
ISS Connect - International User Conference - May '99
http://www.iss.net/iss_connect/
Internet Security Systems, Inc.
(678) 443-6000 / Direct Dial (678) 443-6189 / fax (678) 443-6479
http://www.iss.net
Adaptive Network Security for the Enterprise
=====================================
