[Gilbert Ramirez <gram@xxxxxxxxxx>]

On Thu, 04 Jan 2001 14:00:17 +1100
chandra <chandra@xxxxxxxxxxx> wrote:

> Hi all,
> 
> I am a new user of ethereal and I am trying to monitor the
> ipx and ncp traffic on our network.  However I only seem to
> picking up the RIP and SAP packets and not other stuff.  I
> switched my network card to promiscous mode using ifconfig
> but this did not make any difference.  I am unable to
> generate ipx traffic out of my workstation because I haven't
> got it configured but there should be plenty of ipx traffic
> travelling between our novell 4.1 server and win95/98 users
> on the network segment.  Any clues?

RIP and IPX SAP packets are broadcast packets. It sounds as
if you are on a switch, in which case you will not see
all traffic.

Look at the FAQ question 3.6 at:

http://www.ethereal.com/faq.html

--gilbert