Ethereal-users: [Ethereal-users] capturing packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Ketan P Pancholi" <pancholi@xxxxxxxxxx>
Date: Tue, 11 Sep 2001 15:47:34 -0400
Hi all,

I am running latest ethereal version-0.8.19 on aix. I am using a filter

src host <ip addr> and dst host <ip addr>
It gives me a list of captured packets but in the src and dest fields, it
says N/A for all the packets.In the protocol field it says 0x1840 (instead
of SCTP, as I am running SCTP test runs on both the machines)for all the
packets and in the info field it says PPP(unknown 0x1840).

I was wondering if this is the right format or if I am missing something.

Here I would like to mention that I am using libpcap on aix(IBM's libpcap)
and not dlpi for capturing packets.

When I capture traffic with iptrace and view the file in ethereal window,
its shows the host names,protocols and in the info it gives the type of
data.So it shows fine with the iptrace file but not with the live capture
with ethereal.

Thanks,
Ketan