Guy Harris said:
>> Although requested to report this through the FAQ, my question is: Am I
>> doing this right?
>
> Doing what right?
I meant: Am I initializing eth1 and using ethereal right?
>From what you say below, it would appear that I am.
>
> The mechanism Ethereal uses to do all the work of enumerating network
> interfaces itself will, on some OSes including Linux distributions, not
> see devices with no IP addresses. That doesn't mean it will necessarily
> not support capturing on those devices, it just means it won't list them
> in the drop-down list. Ethereal doesn't itself require an interface to
> have an IP address in order to capture on it (some older versions might
> have, but that was a long time ago), and the Linux packet capture
> mechanism doesn't require it, either.
>
> Libpcap 0.7 and later have an API to enumerate network interfaces; the
> code to do that should, on Linux, be able to find interfaces with no IP
> addresses. Ethereal 0.10.3 and later will, if configured at build time
> to use a libpcap that has that API, use that API rather than doing the
> work of enumerating interfaces itself.
>
> Presumably either
>
> 1) Slackware 9.1's libpcap doesn't support that API
I just pulled down the Slackware 9.1 tgz that's on ethereal's web site.
That may be the case... see below.
>
> or
>
> 2) Ethereal wasn't built to use that API.
>
> What does "ethereal -h" print?
----
This is GNU ethereal 0.10.3
Compiled with GTK+ 2.2.4, with GLib 2.2.3, with libpcap 0.7.2, with libz
1.1.4,
with libpcre 4.4, without UCD-SNMP or Net-SNMP, without ADNS.
Running with libpcap (version unknown) on Linux 2.4.22.
----
Thanks for your help,
Dave
