Ethereal-users: Re: [ethereal-users] No TCP on LINUX?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Hannes R. Boehm" <hannes@xxxxxxxxx>
Date: Thu, 25 Mar 1999 00:33:32 +0100
On Wed, Mar 24, 1999 at 09:08:57PM +0000, David Kaplan wrote:
> I'm running redhat linux 5.2 with kernel 2.2.3 and I've compiled and i'm
> now analyzing fine.  However, I see everything, including IPX, UDP,
> etc., except no TCP.  Any ideas?  Thank you all for your time.

Yes:

But without more information i can only guess:

A) You are on a switched LAN:

You see only Layer-2 Broadcasts and Multicasts:
    including:
	ARPS, DHCP, OSPF(IP), Squid ICP(UDP), IPX Broadcasts, IGMP, CDP, 

(TCP can't be used for Multicast Transmissions)

B) You are the "only" station in a quiet network

    you see your own traffic:
    including:
	IPX: netware emulator
	UDP: DNS queries


In both cases you would see TCP flows, if your own station would have an active
TCP socket. (Try using a web-browser while capturing packets)


wkr
    Hannes

-- 
--
"The nice thing about standards is that there's so many to choose from." 
        -- Andrew S. Tanenbaum
!------------------------------------------------------------------!
  Hannes R. Boehm
        email   : hannes@xxxxxxxxx
        www     : http://hannes.boehm.org
        PGP-key : http://hannes.boehm.org/hannes-pgp.asc
!------------------------------------------------------------------!