Ethereal-users: [Ethereal-users] Capture on Cisco 2950 and WinXP with 2 NIC Cards

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Richard Pawly" <rpawly@xxxxxxxxx>
Date: Wed, 3 Mar 2004 17:22:58 -0500
I have a computer on a Cisco 2950 that has 2 nic cards 1 for network
connectivity and 1 connected to an additional switch port that is setup for
monitoring. This NIC has no subnet, no gateway, no ip address, and no dns
addys. When I try to put host xxx.xxx.xxx.xxx in the capture filter I get
nothing in the way of packets displayed.

When I erase that capture filter and then start with none and then put a
ip.addr == xxx.xxx.xxx.xxx in the filter of the main window I get the
packets just fine. 

I have also just tried giving the 2nd nic (set up for monitoring in the
switch) a ip address gateway and subnet, and when I put host xxx.xxx.xxx.xxx
in the caputre field I get only arp messages asking where the
xxx.xxx.xxx.xxx is and to notify the 2nd nics address. 

Before we had a rag tag of diffent switches installed and it was never a
problem worked great but since the installation of the Cisco 2950s this has
been a issue. 

Please help. 

Thanks

Rich