I got it to work. Looks like reading the file generated by the "record"
option in /etc/ppp-options worked fine. I was able to read the
generated file in Ethereal.
Thanks to everyone who offered help.
-Devin
On Sat, 2002-10-05 at 11:27, Gerald Combs wrote:
> On 4 Oct 2002, Devin Heitmueller wrote:
>
> > I am attempting to use Ethereal to capture data on a PPP interface.
> > Specifically, I do not want to capture at the IP level, but I want to
> > get the PPP headers as well. I tried to capture on ppp0, but I only got
> > the IP packets.
> >
> > First, can Ethereal dissect raw PPP? Second can someone give me some
> > direction on how to set this up under Linux. The Ethereal documentation
> > states that the "pppdump" file format is supported. If someone has more
> > information on how this works, I would be greatly appreciative.
>
> According to
>
> http://www.ethereal.com/lists/ethereal-users/200012/msg00011.html
>
> the Linux PPP drivers strip off any PPP data before handing a packet up to
> the packet capture mechanism. The Linux PPP daemon has a "record" option
> that will save the traffic to a file in "pppdump" format, including PPP
> headers and the direction of each packet. This can be read by the pppdump
> program or by Ethereal/tethereal.
>
--
Devin Heitmueller
Senior Software Engineer
Netilla Networks Inc
