Ethereal-dev: [ethereal-dev] Re: [ethereal-users] Ethereal - Displaying IPX Net names and host

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Mon, 8 Nov 1999 13:29:41 -0800 (PST)
("ethereal-dev" copied, as providing what he wants would, I think,
involve adding more code....)

> 	I fixed my previous problem of capturing IPX specific packets by doing
> a packet byte offset filter:
> 
> 	'ether[53] = 0x15 and ether[56] = 0x0a' 

Hopefully, we can fix that in the future (we'd like to have a capture
filter syntax more like the display filter syntax, including support for
protocols that "libpcap" doesn't know about, e.g. IPX).

> 	It works really well! Now my last issue (minor one) is wanting to be
> able to list names for the IPX network number and ethernet address in the
> source field of the display window. 
> 
> 	I added ethernet addresses to the /etc/ethers file of the capturing
> machine. In the source column of the display window I still get:
> 
> 	4d271134.00a024aad8d5
> 
> 	I would really like to get:
> 
> 	engnet.engstation17
> 
> 	Are there other files I can edit that ethereal goes to for this data?

Unfortunately, there currently *isn't* any file Ethereal goes to in
order to translate IPX addresses to names - it just doesn't do that
translation.

We might want to add something to "resolv.c" to handle IPX addresses;
I'm not an IPX expert, so I'm not sure what the right way to do that
would be.