Ethereal-users: [Ethereal-users] problems sniffing Gigabit

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Michael Cirulli" <mcirulli@xxxxxxxxxx>
Date: Fri, 26 Apr 2002 14:15:01 -0400
I am running Ethereal v0.9.3  on a  linux  system.    I have been just
trying some simple tests to evaluate the tool and I am having a problem
with the data
being reported over a gigabit  interface and over a Fast Ethernet
interface.   I am capturing  packets during a simple ping.

The data being shown on the Fast Ethernet interface shows the ARP correctly
(x'30' bytes)

FF FF FF FF FF FF 02 00 00 00 00 16 08 06 00 01
08 00 06 04 00 01 02 00 00 00 00 16 09 0c 15 bd
00 00 00 00 00 00 00 00 00 09 0c 15 bb

The is showing the brodcast arp sent from 02 00 00 00 00 16   looking for
9.12.15.187

The same capture for the gigabit interface is showing for the ARP  (x'70'
bytes)

45 00 00 54 00 00 40 00  40 01 0c 38 0a 0a 8d 2d
0a 0a bd 30 08 00 fd 5d 05 11 00 01 3c c9 50 ee
00 06 7c cf 08 09 0a ab  0c 0d 0e 0f 10 11 12 13
14 15 16 17 18 19 1a 1b  1c 1d 1e 1f 20 21 22 23
24 25 26 27 28 29 2a 2b 2c 2d 2e 2f 30 31 32 33
34 35 36 37

I was expecting the destination with the souce of 02 00 00 00 00 03.   The
display show the destination of 45 00 00 54 00 00 source as
40 00 40 01 0c 38  and the type as 0a0a (unknwon) .  The ping is for
10.10.141.48  from 10.10.141.45

Anyone know of any problems like this ??

Thanks,
Mike