Gilbert Ramirez wrote:
> On Sat, Jul 10, 1999 at 01:54:27PM -0500, puzzled wrote:
> >
> >
> > Now I have a problem where I might need to closely examine a token ring
> > network and I am wondering how well ethereal will read token ring traces.
>
> It examines them very well. I did most of my development on ethereal using
> token-ring. The TR MAC layer is handled pretty well too; most of the common
> cases are there. I didn't put all the MAC fields, but let me know if you need
> them.
>
I don't think our needs are that intense - we're doing an online lab for CCNA,
CCNP, CCIE studies and I am using linux (redhat) for the terminal server/tftp server
for each 'pod'. We've started with Cisco 2513 (enet/tr), Cisco 2502 (tr) and some
sort of enet only device like a 2501 or 2509 in the lab. Each student area or 'pod'
has an enet hub and a MAU. Based on what you've said I think I'll be locating some
token ring boards to install in the linux boxen so they can see the TR segment.
>
> > I'd
> > just try it, but I don't have a TR card handy and I won't buy one unless I
> > am
> > sure this is going to work. I suppose I'll have to do something like run
> > tcpdump ... or does ethereal work directly with a token ring interface?
>
> Tcpdump and ethereal both use libpcap for packet capturing. It's a multi-
> platform library for packet capturing. The standard libpcap doesn't
> understand token-ring, but you can patch it to do so. I think Paul Norton,
> the Linux TR maintainer, has the patch at ftp://ftp.cts.com/users/crash/p/pnorton
>
> Which OS are you using? Linux? Be aware that ibmtr doesn't support
> promiscuous mode. Olicom's oltr does. Also, if you look at the oltr source code,
> you can define a special variable for it to pass TR MAC frames up the stack, which
> is good for what you're doing.
>
I am very wary of token ring monitoring :-) I once ran a netware daycare with
400+ nodes on 8 rings and we were quite disappointed when we got Lanalyzer and it
wouldn't work with our stock IBM cards - took us something like four weeks to get a
proteon card through purchasing after we had the analyzer warez. IBM generally
stinks, IMNSHO, but that 16/4 ISA TR card is a jewel - worked every single time,
almost never died, good driver support - its a shame it won't do promiscuous mode
since its an otherwise excellent product.
>
> > Thanks
> > in advance, and for the folks working on this - KEEP UP THE GOOD WORK!!!!
> >
>
> --gilbert
