Ethereal-users: Re: [Ethereal-users] v0.8.15 under WinNT

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Wed, 24 Jan 2001 10:27:32 -0800
On Wed, Jan 24, 2001 at 11:19:24AM -0500, Gilbert Ramirez wrote:
> Not easily, since libpcap doesn't support "ipx" as a protocol name,

Actually, the top-of-CVS-tree version of libpcap *does* support "ipx",
and looks for all four count 'em four different forms of IPX
encapsulation on Ethernet.

> I thought Guy Harris had a good discussion about this on the tcpdump-workers
> mailing list (www.tcpdump.org) recently, but I can't find it.

I haven't seen many tcpdump users ask for the ability to filter IPX
packets - in fact, I'm not sure I've seen any - so there might not have
been any discussion of it on tcpdump-workers.

(tcpdump *does* have the ability to dissect IPX packets, although, until
recently, it wasn't recognizing all four count 'em four different forms
of IPX-inside-Ethernet encapsulation.)