Ethereal-dev: Re: [Ethereal-dev] E1/T1 support

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 27 Jun 2002 02:32:20 -0700
On Mon, Jun 24, 2002 at 07:25:13AM -0500, Frank Singleton wrote:
> Also, the T1 interface device will not be present as
> like "eth0" or "lo" etc , so is there a "raw" input mode
> I can use.

Currently, the only devices on which Ethereal can capture are devices
supported by libpcap/WinPcap, which currently means devices supported by
the OS's packet capture mechanism (or that mechanism plus the WinPcap
driver, on Windows).

Those mechanisms don't plug into raw devices, although on BSD you might
be able to rig something up (on systems using DLPI, such as Solaris and
HP-UX, and on Linux and Windows, the packet capture mechanism more
directly plugs into the networking code, so that might be harder).

On UNIX systems, you could write a program that reads the device and
writes out a tcpdump file, send that program's output to a FIFO, and
tell Ethereal to capture from the FIFO.