Ethereal-users: Re: [Ethereal-users] PPP data on Ethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Mon, 4 Dec 2000 13:56:10 -0800 (PST)
> I am running Red Hat Linux 7.0 (Linux version 2.2.16-22) and Ethereal
> 0.8.14. I have a dial-up conection to my ISP and I am trying to trace PPP
> information using Ethereal. Bu but I only see information starting at the IP
> layer. How can I get the PPP information?

Erase your disks and install one of {Free,Net,Open}BSD, or possibly
BSD/OS, on your machine.  (Solaris *might* work as well; I don't know.)

Linux's PPP drivers refuse, for whatever reason, to supply PPP headers
to Linux's mechanisms for doing packet capture (PF_INET/SOCK_PACKET and
PF_PACKET/SOCK_RAW sockets), and also don't supply any control packets
(LCP, etc.) to that mechanism.  BSD's packet capture mechanism plugs
into its network drivers at a lower level, so that it they can supply
control packets to it, and its drivers don't strip off the PPP header.