[Guy Harris <gharris@xxxxxxxxx>]

On Tue, Mar 05, 2002 at 10:10:31AM +0100, cpuidle@xxxxxxx wrote:
> I want to use ethereal on W2K to analyze some Oracle TNS traffic.  I've
> installed ethereal and can capture packets just fine.  However, all
> packets that must be TNS to my knowledge, show up as TCP.

Are they packets to or from TCP port 1521?

If not, then they're not to the port that the TNS dissector considers
the standard TNS port.  You'd have to use the "Decode As..." menu item
under the "Tools" menu to add a new port - select one of those packets,
select "Decode As..." from the "Tools" menu, and then select the correct
port (source or destination) to use, and then select "TNS" as a
protocol.

If they *are* packets to port 1521, I'd need to see a capture file in
order to figure out why they're not being displayed as TNS packets.