> I saw your name on multiple replies on the ethereal board and hoped
> that you wouldn't mind me asking you a direct question. On AIX 4.3.3 with
> a token ring card I'm trying to run ethereal 8.11.0 and I not sure what to
> put in the interface name selection. When I do a netstat -i I get the name
> of the interface to be tr0, but when i look for the directory the interface
> is in I can't find one. Do you have any suggestions?
Well, my first suggestion if "ask ethereal-users@xxxxxxxxxxxx, because I
don't have an AIX machine handy, much less one with token ring, and
somebody such as Craig Rodrigues, even though he's not working with AIX
any more, as I remember, might be more familiar with it".
I think libpcap, by default, doesn't use DLPI on AIX (I think it'll find
a "/dev/bpf0", and conclude that it should use BPF), so it won't try to
use a "/dev/tr" or a "/dev/tr0" device. BPF isn't a normal BPF on AIX,
and isn't supported by IBM - it's there only for IBM's hacked-up
tcpdump, and IBM have yet to see fit to supply to the maintainers of
libpcap any changes to allow standard tcpdump, or any other programs
that use libpcap, to use it. It may or may not work correctly.
You can use the
--with-pcap=dlpi
argument to libpcap's configure script to force it to use DLPI; however,
the current version of libpcap (0.5.2) doesn't include Craig's changes
to fix some problems, so I'm not sure it'll work, either.
The current CVS version of libpcap does have his changes; see
www.tcpdump.org, under "Current Tar files".
Does your AIX machine have neither a "/dev/tr" nor a "/dev/tr0"? If
not, then DLPI probably won't work; however, I have no idea why those
devices would be missing - you'd have to ask somebody familiar with AIX
to help you there, which is why I'm CCing "ethereal-users".
