["Philip" <etherphilip@xxxxxxxx>]

From: "Ronnie Sahlberg"
Sent: Friday, October 03, 2003 11:36 AM
Subject: Re: [Ethereal-users] Does Ethereal support the 'real' ARCNet?


> From: "Philip"
> Sent: Friday, October 03, 2003 6:44 PM
> Subject: Re: [Ethereal-users] Does Ethereal support the 'real' ARCNet?
>
>
> > Yes thats true. ARCNet is ARCNet, whether it transports TCP/IP data or
> not.
> > What I am actually looking for is a sniffer, which can 'decode' the
ARCNet
> > network data (src, dst, ack, nack,enq etc.) Ever since the network I
will
> > have
> > to exam does only support arcnet and no higher level protocol (eg.
IP)...
> > I therefor can't use a sniffer which can handle (e.g. TCP/IP) traffic
over
> > ARCNet
> > because I only want and can see ARCNet... well well, think I just have
> > to try it out :-/

>>> Use Edit/Protocols and disable ARP and IP and then you should only see
the
>>> actual ARCNet packets and
>>> ethereal will not attempt to decode the payload.

>>> Do you have any example captures of say 1000-10000 packets you can
donate?
>>> I would like to add ARCNet to the conversation list for completeness.

ah rigtht, many thanks!
so you think Ethereal will decode every ARCNet specific flag like 'ack, nak,
eot, ...'?

Unfortunatly I do not have any sample captures yet. In fact I did not have
any chance so
far to exam the network. Due to my 'final student project' I will have the
chance to analyse
the net in a week (maybe weeks). I will email you some sample data ASAP.

regards from Switzerland,
philip