Ethereal-users: [Ethereal-users] Capture on Cisco 2950 and WinXP with 2 NIC Cards

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Richard Pawly" <rpawly@xxxxxxxxx>
Date: Wed, 3 Mar 2004 17:22:58 -0500
I have a computer on a Cisco 2950 that has 2 nic cards 1 for network
connectivity and 1 connected to an additional switch port that is setup for
monitoring. This NIC has no subnet, no gateway, no ip address, and no dns
addys. When I try to put host xxx.xxx.xxx.xxx in the capture filter I get
nothing in the way of packets displayed.

When I erase that capture filter and then start with none and then put a
ip.addr == xxx.xxx.xxx.xxx in the filter of the main window I get the
packets just fine. 

I have also just tried giving the 2nd nic (set up for monitoring in the
switch) a ip address gateway and subnet, and when I put host xxx.xxx.xxx.xxx
in the caputre field I get only arp messages asking where the
xxx.xxx.xxx.xxx is and to notify the 2nd nics address. 

Before we had a rag tag of diffent switches installed and it was never a
problem worked great but since the installation of the Cisco 2950s this has
been a issue. 

Please help. 

Thanks

Rich