Ethereal-users: Re: [ethereal-users] sorry sent it to the wrong one first

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Jerry Talkington <jerryt@xxxxxxxxxx>
Date: Mon, 29 Nov 1999 13:01:16 -0800
* Allen Snook (allen_snook@xxxxxxxxxxx) done spit this rhetoric:
> I have a question that I hope is not to mundane to answer....  I'm
> running Red Hat Linux ver 6.0 and Ethereal 0.7.9.  What I am wondering
> is how do I setup ethereal to monitor HTTP or Port 80 from other than my
> own eth0 card   i.e. if I wanted to monitor the HTTP traffic of the
> users on my network.  I tried to set a filter for HTTP no good couldn't
> parse so I read at your site set it for tcp.port==80 no parse error but
> still get no info unless I startup a web browser locally, then where
> ever
> I go I get the info I'm looking for..
 
The system it's run on has to be on some sort of network that will pass
along all of the packets to it.  If you're on a switch, it won't work
(unless you do some sort of port mirroring on the switch).  Also, the NIC
in your machine has to be able to go into promiscous mode.

-- 
Jerry Talkington
NetCache Escalation Engineer
Network Appliance, Inc.

"I believe the children are our future: nasty, brutish and short."