On Wed, Jun 16, 1999 at 04:00:29PM -0500, Guy Harris wrote:
>
>
> > The base protocol (ethertype 1984) is called TRAIL,
>
> Called that by whom? NetMon? It's not in any of the Ethernet type
> listings I've seen.
Probably NetMon.
> > then there are several
> > things that layer on that, STATS being just one of them. There are also
> > menu items that let you insert "comments" into a capture, and other less
> > explainable things.
>
> >From which menu do you get those? (It's not in any obvious menu in the
> version of NetMon I have, but I'm not sure where that version came from
> - I've heard NetMon is bundled with NT server, but the machine I have
> isn't running NT Server, and a version that may be fancier comes with
> System Management Server.)
Tools | Insert Comment Frame
My NetMon is described as:
Retail 349 Jul 10 1996
Network Monitor V4.00.349
It's from the NT Enterprise Server CD-ROM.
After looking at the decode for the TRAIL and STATS "layers" that NetMon
shows, adding a dissect() routine for the TRAIL and STATS layers to
ethereal would be easy enough. But they'd have to be taken into
consideration when using the Summary routines in ethereal.
--gilbert
