Ethereal-users: Re: [Ethereal-users] localhost packets not captured

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gerald Combs <gerald@xxxxxxxxxxxx>
Date: Tue, 24 Sep 2002 21:36:18 -0500 (CDT)
On Tue, 24 Sep 2002, Diwakar Shetty wrote:

> I have a solaris machine
> "uname -a" gives the following
> SunOS usunnad01 5.8 Generic_108528-14 sun4u sparc SUNW,UltraAX-i2
> 
> The ethereal binary which i am using is
> "ethereal-0.9.6-solaris2.8-sparc-local"
> 
> In the capture window, only one interface is shown i.e "dmfe0"
> Hence i use it.
> 
> I send TCP packets from the same machine to the same machine on which
> ethereal is running.
> 
> However, ethereal fails to capture these packets.
> 
> What may be the reason ?

If all of the traffic you're trying to capture is local to the machine
you're running Ethereal on, you won't be able to see it under Solaris.
Even if you connect to the IP address attached to dmfe0, the traffic will
be routed internally, and not appear on the interface.  In order to to see
local traffic you would have to capture on the loopback interface (lo0).  
Unfortunately Solaris doesn't have that capability.


> Also where can I get the latest ethereal on solaris binaries ?

It sounds like you already have them.  The latest version of Ethereal is
0.9.6; Solaris packages for 0.9.6 are available at
http://www.ethereal.com/distribution/solaris/.