On Fri, Nov 08, 2002 at 07:12:31AM +0000, darren wrote:
> Anyone knows if the Endance DAG 3.5 OC3/12 monitoring network card can
> work with ethereal under RedHat 7.3, stock kernel?
Only if their driver plugs into the networking stack like any other
driver, and sends the stuff it captures up the networking stack like any
other driver, so that it can be captured using the PF_PACKET socket
mechanism that libpcap uses, as Ethereal uses libpcap to do packet
capturing.
Given that the page at
http://www.endace.com/products/products.html
speaks of it being "receive-only" and having "trace capture applications
software" provided as standard, I suspect it doesn't.
(Some other ways to write the first paragraph are
Only if it can work with tcpdump.
or
Only if it can be used by libpcap.
where the former is largely equivalent to the latter, modulo issues of
DLT_ types supported by tcpdump but not Ethereal or *vice versa*.)