[Guy Harris <guy@xxxxxxxxxx>]

> I've been able to capture frames in the Sniffer that were
> too damaged to be passed up by any self-respecting 
> ethernet card to Ethereal.  

The classic DOS Sniffer probably had its own drivers for the Ethernet
adapter, so, if the card could be told to supply even runts, packets
with bad CRCs, etc. to the host, they could make it do so.

The Windows Sniffers might have their own drivers as well, or there
might be a way to tell an NDIS driver to do so (I don't have NDIS
documentation handy, so I don't know if that's the case).

Ethereal depends on the OS's drivers and capture mechanism (or, on
Windows, on the OS's drivers and the WinPcap capture mechanism), so
there are limits on what it can do.