["Bryan Keadle" <BKeadle@xxxxxxxxxxxxxx>]

Thanks.  Though I had gone to the switch to enable port spanning to the ports I needed, the setting wasn't being saved...hence, I was only seeing broadcast traffic.

>>> Guy Harris <gharris@xxxxxxxxx> 05/11/02 06:24PM >>>
On Sat, May 11, 2002 at 06:15:17PM -0500, Bryan Keadle wrote:
> How does one "add" NCP functionality to Ethereal?

Given that it's already there, one *can't* "add" it.

There may be a *bug* in the code, so that the NCP packets aren't
recognized as such, that's another matter.

> I've downloaded the latest version, 0.9.3.  I've checked ALL protocols
> to be captured while watching a workstation login to a Novell server.  I
> see *NO* NCP traffic.

Are you running Ethereal on the workstation?

If not, are you seeing any *other* non-broadcast traffic between the
workstation and the server?

If not, this may just be the usual problem with sniffing on a switched
network (note that a "hub" might be a switching hub, so if the network
is on a "hub" it might still be switched) or a network with a dual-speed
hub:

    http://www.ethereal.com/faq.html#q4.1

---

This message has been 'sanitized'. This means that potentially dangerous content has been rewritten or removed. The following log describes which actions were taken.

Sanitizer (start="1021163688"):
  Part (pos="1152"):
    SanitizeFile (filename="unnamed.txt", mimetype="text/plain"):
      Match (rule="2"):
        Enforced policy: accept

  Part (pos="2377"):
    SanitizeFile (filename="unnamed.html", mimetype="text/html"):
      Match (rule="default"):
        Enforced policy: accept

    Rewrote HTML tag: >>_BODY style="MARGIN-TOP: 2px; FONT: 10pt Tahoma; MARGIN-LEFT: 2px"_<<
                  as: >>_BODY DEFANGED_style="MARGIN-TOP: 2px; FONT: 10pt Tahoma; MARGIN-LEFT: 2px"_<<
    Total modifications so far: 1

Anomy 0.0.0 : Sanitizer.pm $Id: Sanitizer.pm,v 1.54 2002/02/15 16:59:07 bre Exp $

======================