Ethereal-users: Re: [Ethereal-users] Query

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Saurabh Bhasin <sbhasin@xxxxxxxxx>
Date: Wed, 27 Jul 2005 09:44:41 -0700
On 7/27/05, Babur Khan <bc201078@xxxxxxxxxxxxxxxx> wrote:
[snip]
> Is Ethereal works Network Layer and capture at other layers so that my packet
> Captured before Data Link layer and where it receives, it captured at network
> layer after decryption at Data Link Layer.
> Am i Correct?
> Or is there any other issue?
> Can you tell me please any other sniffer that works at data link layer?

A Protocol analyzer or a packet capture software does not work at a
certain layer. Ethereal captures packets/frames that contain
information related to all layers (starting from layer 2 and going all
the way up to layer 7).