(Subject line changed, as your message appears to have nothing to do
with the announcement of the SNMP site in question; if one wants to send
to a mailing list, it's generally not considered good form to do so by
replying to an unrelated message.)
On Wed, Jun 07, 2000 at 05:02:32PM -0400, Jim Wildman wrote:
> On HPUX (due to the libpcap problems) ethereal can't see all of the
> packets (or just crashes).
Which libpcap problems are those? There are some problems with DLPI on
some versions of HP-UX, as described in the "README.hpux" file, which
cause it not to be able to see outgoing packets unless you update your
HP-UX release with some patches, but
1) that's a problem below libpcap, not a problem with libpcap;
2) it's not a problem unique to Ethereal - *any* program using
DLPI to read packets (whether it uses DLPI through libpcap or
through some other code) will fail to see outgoing packets
unless the OS patches are applied;
3) it won't cause crashes - the crashes are probably an
unrelated problem, quite possibly not unique to HP-UX,
and you should try to get a stack trace from the core dump
(if a core dump is produced) and, if possible, send us a copy
of the capture files that, when read by Ethereal, cause it to
crash (if it's from a live capture, there will probably be a
temporary file in "/tmp" or "/var/tmp" with "ether" at the
beginning of its name, which is the capture file in question).
There are other libpcap problems that cause attempts to open a device by
the name that "ifconfig" reports for it to fail - you have to find the
device's PPA or whatever, and open it as "dlpiN", where "N" is the PPA -
but the "README.hpux" file contains a patch to libpcap to fix that
(I'll send that patch, once more, to the tcpdump.org folk, to remind
them of it, in the hopes that it'll get folded into a future libpcap
release). Those problems, however, shouldn't affect which packets
Ethereal can see.
