Ethereal-users: [Ethereal-users] NT4 reads tr packets as ethernet II

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Ph. Marek" <marek@xxxxxxxxxxxxxxx>
Date: Wed, 28 Mar 2001 11:09:23 +0200
Hi everybody,

I'm having a problem with ethereal.


It works very well with linux, but I have a problem in NT4: it thinks that
the incoming packets (via olicom tr 3140) are frame type "ethernet II". If
I uncheck "protocols/eth" it says "unsupported WTAP_PCAP=1".

This is with the current binaries.


So I downloaded the sources and tried to debug wpcap.dll, where such a
check is performed - I thought, the switch: default -> Ethernet10MB is the
case where it went wrong.

BUT: wpcap.dll is never used by ethereal!!! So what am I doing wrong?

If I try to say "decode as" it tells me about etherframe type xxxx, but I
cannot tell it to take them as tokenring frames.


What does work is to capture, save as, editcap -T tr in out, and reload the
file - but this way I cannot have a capture filter, and it's not really
nice to do.


Please help!


Regards,

phil