On Wed, Jan 24, 2001 at 04:04:14PM +0100, Michael.Heimann@xxxxxxxxxxxxxxxxxxxxxx wrote:
> Hello,
> I am trying to use ethereal on a WINNT workstation. Capturing runs fine
> but I have problems with the handling because no individual settings
> like filters or other preferences (e.g disabled protcols) are stored
> from one session to another. Where tries the NT version to store this
> information, and what environment variable(s) must be present? Is
It tries to store this information in your home directory, which is easy
to find on Unix, but a bit harder on Win32. Maybe it would be better to
store this information in the register on Win32. Anyway, for Win32, this
is the algorithm we use to determine your home directory
(from epan/filesystem.c in the ethereal source code):
Get the HOMEDRIVE environment variable
If available get the HOMEPATH environment variable
If available, home = HOMEDRIVE + HOMEPATH
If not avilable, home = HOMEDRIVE
If not available, HOMEDRIVE = "C:"
> version 0.8.15 - the number is a joke in german ;-) - recommended for NT
Really? Can you explain the joke? Just curious.
> or is there a better one in the archive?
> Is there a possibility to filter IPX packages when capturing?
> Thanks for your help!
> Regards
Not easily, since libpcap doesn't support "ipx" as a protocol name, and
ipx can appear inside ethernet payloads in a variety of ways. For a
discussion on this, read the thread starting at:
http://www.ethereal.com/lists/ethereal-users/200008/msg00175.html
I thought Guy Harris had a good discussion about this on the tcpdump-workers
mailing list (www.tcpdump.org) recently, but I can't find it.
--gilbert
