i have a redhat linux server with an ibm token ring (olympic) and intel
ethernet card in it. the box is acting as a address translation router
for an ethernet workstation in a token ring environment.
workstation --> [eth(0)]server[tr(0)] --> network
i am using ethereal 0.8.11, libpcap-0.4-27
the token ring (tr0) address on the box is 10.2.101.101
the ethernet (eth0) address on the box is 192.168.254.254
the address of my workstation (separate box) is 192.168.254.1
the problem i see is that i can run captures with ethereal and any
filter i want on eth0 from both my workstation and the server. however,
when i try to do ANY capture filtering on with tr0 i get no packets
captured (and there is a TON of traffic on the token ring side).
on the other hand, all of these work with tcpdump:
tcpdump -itr0 host 10.2.101.101
tcpdump -itr0 port 80
... as well as against eth0, yet none will work with tr0.
any idea why?
b