On Thu, Jul 13, 2000 at 09:13:46AM +0200, tgegenwart wrote:
> I've read that there is no support for Token-Ring Adapter with WinPCap.
> Can I use another tools like WinPCap with Token Ring Support?
Unfortunately, the only other libpcap port I know of to Win32 is the one
at
http://www-serra.unipi.it/~ntop/libpcap.html
and a quick look at the code suggests that it doesn't handle Token Ring,
either.
The DLT_ value that appears to be used for Token Ring is DLT_IEEE802; it
may be reasonable to have Win32 libpcap ports use that for Token Ring
captures - even if there aren't any Token Ring machines at the
Politecnico di Torino, it might still be worth sticking the code in, so
that users who *do* have Token Ring can test it (the page at
http://netgroup-serv.polito.it/winpcap/misc/comp.htm
says that FDDI support is also untested as they don't have the
hardware).
Fulvio?
(Note that the packet filter compiler in libpcap won't generate code to
correctly handle source-routed packets; making it do so would, I
suspect, involve a fair bit of work to handle variable-length link-layer
headers - the BPF machine language might support it, but it really
prefers fixed-length headers.
It looks as if it should generate correct code for non-source-routed
packets, however.
It also can't handle tests of link-layer addresses on Token Ring, but
mergng in changes from patches out there for Token Ring support should
allow it to do that - at least for non-source-routed packets.
Windump won't be able to dissect them, as it's based on a version of
tcpdump that can't handle Token Ring; I have a Token Ring dissector
constructed by merging the FreeBSD and NetBSD tcpdump ones, which I'll
check into the tcpdump.org code base if the tcpdump-workers list
approves.
Ethereal/Tethereal can dissect Token Ring packets.)