Ethereal-users: Re: [ethereal-users] Ethereal & multiple nic's

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gilbert Ramirez <gram@xxxxxxxxxx>
Date: Wed, 12 Jan 2000 07:23:59 -0600
On Wed, Jan 12, 2000 at 06:42:33AM -0600, Manuel.Valdes@xxxxxxxxxxxx wrote:
> 
> 
> Hello,
> I'm planing to use ethereal in a Linux box with 2 Nic's.
> one of the nic has IP address and the other not,so
> if i take ifconfig command in linux i will se both
> network adapter

I don't have a machine handy to try this one (I'm telnetted
into my Linux box right now; I don't want to 'ifconfig down eth0'
my telnet session!).

If you 'ifconfig up' your NIC, without giving it any parameters
like IP address, does it appear in Ethereal's capture dialogue
popup list? I would think so.

If not, you can still give the 2nd NIC an IP address, just give
it some fake one that nothing should be routed to. This is how
the DOS-based Remote Sniffer product from Network Associates
works; it has one NIC for communication to a central Sniffer,
and one NIC for sniffing. In DOS, you give both an IP address, but
the sniffing-NIC's IP address is bogus.

> Is it possible for ethereal to capture packtes from a Nic
> which is not configurated with the IP stack ?

It should be.

> I use export DISPLAY to use ethereal as a distribuert Distribuert
> Protocol analyzer.

Nice!

--gilbert