Ethereal-users: Re: [Ethereal-users] LAN and PPP interface

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Thu, 19 Oct 2000 00:58:19 -0700
On Thu, Oct 19, 2000 at 07:54:17AM +0200, ivan vuckovic wrote:
> 2) Captured packets haven't  PPP header but ethernet header width PPP
> message in data field

Captures from your PPP link have an Ethernet header *and* a PPP header?

If so, WinPcap should probably strip off the Ethernet header and treat
the traffic as DLT_PPP rather than DLT_EN10MB.

> 3) Can I capture Q931 message width any ISDN modem?

That depends on whether the driver for the ISDN modem will supply to
drivers such as the WinPcap driver traffic on the D channel.  If it
does, it might be possible to make the WinPcap driver handle it; it
probably won't handle it now.

Once that's done, WinDump/tcpdump and Ethereal and, possibly, other
programs using WinPcap could be modified to handle D-channel traffic.

(WinPcap isn't part of Ethereal, it's just a library and driver that
Ethereal use; it's developed and supported independently from Ethereal.)