Ethereal-users: Re: [Ethereal-users] wierd packets in ippp capture

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Jon Forsberg <zzed@xxxxxxxxxxxxx>
Date: Sat, 18 Nov 2000 18:22:58 +0100
On Sat, Nov 18, 2000 at 10:41:28AM -0600, Gilbert Ramirez wrote:
> On Sat, 18 Nov 2000 17:15:54 +0100
> Jon Forsberg <zzed@xxxxxxxxxxxxx> wrote:
> 
> > Hi,
> > I get wierd packets when capturing from my ippp0 (ISDN) interface. The first
> > one comes at 26.040316 in the included capture.
> > I notice the last byte of the source address increases by one for every packet
> > while the others are more random. Looks like ethereal tries to parse an ip header
> > at the wrong position.
> > 
> > Debian 2.2 (libpcap 0.4a6-3, kernel 2.2.17).
> > 
> 
> The attachment did not arrive.
> 
> --gilbert
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
> 

Sorry, here's a new one. This time it starts at 7.970739.

--zzed
Ôò¡ÿÿ‡¹:JHHÿ=Àˆ!E>Vÿ@‹½Õtò©ÃSÍ5*‘õЩwwwetherealcom‡¹:omªªEªßx@ø
×ÁSÕtò©5͖€wЩ€wwwetherealcomÀ@ÇðWÞETHEREALCOMO‘NS1NETISINCNETÀ2O‘NS2ÀNÀJO‘ÇðWÇÀhO‘@ÚÎLJ¹:‰|^^ÿ=Àˆ‘!ETW@;¼Õtò©ÇðWÞý$h‡¹:S|	

 !"#$%&'()*+,-./01234567‡¹:ý¦TTETuÊésñÇðWÞÕtò©%h‡¹:S|	

 !"#$%&'()*+,-./01234567ˆ¹:¯p^^ÿ=Àˆ’!ETW@;»Õtò©ÇðWÞÐ0hˆ¹:~p	

 !"#$%&'()*+,-./01234567ˆ¹:Ô\TTETuÍésîÇðWÞÕtò©Ø0hˆ¹:~p	

 !"#$%&'()*+,-./01234567‰¹:k—^^)ÿ=Àˆ“!ETW@;ºÕtò©ÇðWÞ
h‰¹:6—	

 !"#$%&'()*+,-./01234567‰¹:êTTETuÒéséÇðWÞÕtò©
h‰¹:6—	

 !"#$%&'()*+,-./01234567Š¹:b—^^ÿ=Àˆ”!ETW@;¹Õtò©ÇðWÞ
hŠ¹:,—	

 !"#$%&'()*+,-./01234567Š¹:%TTETuÕésæÇðWÞÕtò©&
hŠ¹:,—	

 !"#$%&'()*+,-./01234567‹¹:\—^^)ÿ=Àˆ•!ETW@;¸Õtò©ÇðWÞ 
h‹¹:(—	

 !"#$%&'()*+,-./01234567‹¹:C8TTETuÙésâÇðWÞÕtò©(
h‹¹:(—	

 !"#$%&'()*+,-./01234567Œ¹:^—^^ÿ=Àˆ–!ETW@;·Õtò©ÇðWÞ
hŒ¹:(—	

 !"#$%&'()*+,-./01234567Œ¹:éTTETuáésÚÇðWÞÕtò©&
hŒ¹:(—	

 !"#$%&'()*+,-./01234567Ž¹:‰îHHÿ=Àˆ—!E>W@‹¶Õtò©ÃSÍ5*-x5'wwwetherealcomŽ¹:e
ªªEªßy@ø
ÖÁSÕtò©5͖"5'€wwwetherealcomÀ8ÇðWÞETHEREALCOMO‰NS1NETISINCNETÀ2O‰NS2ÀNÀJO‰ÇðWÇÀhO‰@ÚÎǎ¹:]m
FFÿ=Àˆ˜!E<W@@ûÇÕtò©ÇðWÞ
FPïy[D >¼ÍL´
—ý%¹:¡“<<E<v@*òÆÇðWÞÕtò©P
FíÍïy[E }xæ¹´
³ÖÓ—ý%¹:ý“>>˜!E<W@E4W@@ûÎÕtò©ÇðWÞ
FPïy[EíÍ €>¼T%
—ý;³Öӏ¹:v§QQ€EGW	@@öºÕtò©ÇðWÞ
FPïy[EíÍ €>¼î6
—ý<³ÖÓGET / HTTP/1.0
Host: www.ethereal.com
Accept: text/html, text/plain, description=pngimage, , , application/vnd.rn-rn_music_package, application/x-freeamp-theme, audio/mp3, audio/mpeg, audio/mpegurl, audio/scpls, audio/vnd.rn-realaudio, audio/x-mp3, audio/x-mpeg, audio/x-mpegurl
Accept: audio/x-pn-realaudio, audio/x-scpls, image/png, application/x-troff-man, image/avs, image/bie, image/bmp, image/cmyk, image/dcx, image/eps, image/fax, image/fits, image/gif, image/gray, image/gradation, image/hdf, image/jpeg, image/map
Accept: image/miff, image/mono, image/mtv, image/x-portable-bitmap, image/pcd, image/pcx, image/pdf, image/x-portable-graymap, image/pict, image/png, image/x-portable-anymap, image/x-portable-pixmap, image/ps, image/rad, image/x-rgb, image/rgba
Accept: image/rla, image/rle, image/sgi, image/sun-raster, image/targa, image/tiff, image/uyvu, image/vid, image/viff, image/x-bitmap, image/x-xwindowdump, image/yuv, application/x-debian-package, audio/basic, audio/basic, audio/x-aiff, audio/x-gsm
Accept: audio/x-wav, application/x-tar, application/x-gtar, application/x-dvi, application/xrx, text/*, text/*, */*, text/sgml, video/mpeg, application/postscript, */*;q=0.01
Accept-Encoding: gzip, compress
Accept-Language: en
User-Agent: Lynx/2.8.3rel.1 libwww-FM/2.14

¹:	44E4v@*òÇÇðWÞÕtò©P
FíÍ ïy`X€|p2
³Öþ—ý<¹:¬?ÜÜEÜv@*íÇðWÞÕtò©P
FíÍ ïy`X€|p7+
³Öþ—ý<HTTP/1.1 200 OK
Date: Sat, 18 Nov 2000 17:16:29 GMT
Server: Apache/1.3.14 (Unix) PHP/4.0.3
Last-Modified: Tue, 14 Nov 2000 04:17:17 GMT
ETag: "185f7-214a-3a10bccd"
Accept-Ranges: bytes
Content-Length: 8522
Connection: close
Content-Type: text/html
X-Pad: avoid browser bug




<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML> 
<HEAD> 
  <TITLE>The Ethereal Network Analyzer</TITLE>
</HEAD>
<BODY BGCOLOR="#ffffff" TEXT="#000000" onload="if (window != window.top) {top.location.href=location.href }" >

<table width=100% cellspacing=0 cellpadding=0 border=0>
  <tr><td align=left>
    <table height="100%" cellspacing=0 border=0><tr>
      <td><img align=left src=/image/ethereal-logo-small.gif alt=""></td>
      <td>
        <h1> Ethereal</h1>A network protocol analyzer.
      </td>
    </tr></table>
  </td>
<td align=right valign=top>
    <table height="100%" cellspacing=0 border=0>

      <tr><td align=right valign=top nowrap><small>
        <form method="post" action="http://www.ethereal.com/cgi-bin/htsearch";>
          Search:
          <input type=hidden name=method value=and>
          <input type=hidden name=format value=long>
          <input type=text size=10 name=words>
	  <input type=hidden name=config value=ethereal>
           &nbsp;<a href="http://www.ethereal.com/search/";>options</a>
        </form>
      </small></td></tr>


      <tr><td align=right valign=bottom nowrap><small>
        Mirrors:&nbs¹:@>>˜!E<W@E4W
@@ûÌÕtò©ÇðWÞ
FPïy`XíÒȀ9N§
—ý{³Öþ¹:±ÜÜEÜv@*íÇðWÞÕtò©P
FíÒÈïy`X€|p‡Q
³Öþ—ý<p;&nbsp;
        <a href="http://gd.tuwien.ac.at/www.ethereal.com/";>Europe 1</a>&nbsp;&nbsp;
        <a href="http://ethereal.archive.sunet.se/";>Europe 2</a>&nbsp;&nbsp;
        <a href="http://ethereal.mirror.aarnet.edu.au/";>Australia</a>
      </small></td></tr>

    </table>
  </td></tr>
</table>

<!-- $Id: index.m4,v 1.9 2000/06/13 21:23:13 gerald Exp $ -->

<center><table width=100% cellspacing=15 border=0>

<tr valign=top>

<td width=25%>
  <table bgcolor=#000000 cellspacing=0 cellpadding=0 width=100% border=0>
  
    <tr bgcolor=#006666><td><table width=100% cellpadding=5 border=0>
      <tr><td><font color=#ffff99><b>I<small>NFORMATION</small></b></td></tr>
    </table></td></tr>
    <tr bgcolor=#006666><td><table width=100% cellpadding=5 border=0>
      <tr><td bgcolor=#ffffff>
    <nobr>
    <b><a href="introduction.html">Introduction</a></b><br>
    <small>
      &nbsp;&nbsp;&nbsp;<a href="introduction.html#features">Features</a><br>
      &nbsp;&nbsp;&nbsp;<a href="introduction.html#screens">Screen Shots</a><br>
      &nbsp;&nbsp;&nbsp;<a href="introduction.html#authors">Authors</a><br>
      &nbsp;&nbsp;&nbsp;<a href="introduction.html#license">Licensing</a><br>
    </small><p>

    <b><a href="download.html">Download</a></b><br>
    <small>
      &nbsp;&nbsp;&nbsp;<a href="download.html#requirements">Requirements</a><br>
      &nbsp;&nbsp;&nbsp;<a href="download.html#binaries">Binary&nbsp;Packages</a><br>
     ¹:>>˜!E<W@E4W@@ûËÕtò©ÇðWÞ
FPïy`XíØp€8Iq
—ý³Öþ¹:V•ÜÜEÜv@*íÇðWÞÕtò©P
FíØpïy`X€|p™
³×)—ý{ &nbsp;&nbsp;&nbsp;<a href="download.html#sources">Source&nbsp;Code</a><br>
    </small><p>
    <b>Resources</b><br>
    <small>
      &nbsp;&nbsp;&nbsp;<a href="faq.html">Frequently&nbsp;Asked&nbsp;Questions</a><br>
      &nbsp;&nbsp;&nbsp;Manual pages<br>
      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href="ethereal.1.html">Ethereal</a><br>
      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href="tethereal.1.html">Tethereal</a><br>
      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href="editcap.1.html">Editcap</a><br>
      &nbsp;&nbsp;&nbsp;<a href="/lists/">Mailing&nbsp;Lists</a><br>
      &nbsp;&nbsp;&nbsp;<a href="/sample/">Sample&nbsp;Captures</a><br>
      &nbsp;&nbsp;&nbsp;<a href="links.html">Useful Links</a><br>
    </small><p>
    <b><a href="development.html">Development</a></b><br>
    <small>
      &nbsp;&nbsp;&nbsp;<a href="development.html#anoncvs">Anonymous&nbsp;CVS</a><br>
      &nbsp;&nbsp;&nbsp;<a href="development.html#wishlist">Wish&nbsp;List</a><br>
    </small><p>
    </nobr>
  
      </td></tr>
    </table></td></tr>

      <tr bgcolor=#ffffff><td><img alt="" src=/image/1x1.gif height=15></td></tr>

  
    <tr bgcolor=#006666><td><table width=100% cellpadding=5 border=0>
      <tr><td><font color=#ffff99><b>T<small>IP OF THE </small>W<small>EEK</small></b></td></tr>
    </table></td></tr>
    <tr bgcolor=#006666><td><table width=100% cellpadding=5 border=0>
      <tr><td bgcolor=#ffffff>
Recent versions of Ether¹:>eÜÜEÜv@*íÇðWÞÕtò©P
FíÞïy`X€|pFŠ
³×)—ý{eal have included many enhancements to the
interface.  Under the "Display" menu, you can now jump to a particular
frame, find a frame in the list, and match a frame's component.
The filter entry box now sports a popup list, similar to many web
browsers.  The TCP stream window can display the client and server data
in different colors.

  
      </td></tr>
    </table></td></tr>
  </table><p>
</td>

<td>
  <table bgcolor=#000000 cellspacing=0 cellpadding=0 width=100% border=0>
  
    <tr bgcolor=#006666><td><table width=100% cellpadding=5 border=0>
      <tr><td><font color=#ffff99><b>D<small>ESCRIPTION</small></b></td></tr>
    </table></td></tr>
    <tr bgcolor=#006666><td><table width=100% cellpadding=5 border=0>
      <tr><td bgcolor=#ffffff>
Ethereal is a free network protocol analyzer for Unix and Windows.
It allows you to
examine data from a live network or from a capture file on disk.  You  can
interactively browse the capture data, viewing summary and detail
information for each packet.  Ethereal has several powerful features,
including a rich display filter language and the ability to view the
reconstructed stream of a TCP session.<p>
  
      </td></tr>
    </table></td></tr>

      <tr bgcolor=#ffffff><td><img alt="" src=/image/1x1.gif height=15></td></tr>

  
    <tr bgcolor=#006666><td><table width=100% cellpadding=5 border=0>
      <tr><td><font color=#ffff99><b>N<small>EWS</small></b></td></tr>
    </table></t¹:e>>˜!E<W@E4W@@ûÊÕtò©ÇðWÞ
FPïy`XíãÀ€8=Ë
—ý¸³×)¹:3JÜÜEÜv@*íÇðWÞÕtò©P
FíãÀïy`X€|pã®
³×;—ýd></tr>
    <tr bgcolor=#006666><td><table width=100% cellpadding=5 border=0>
      <tr><td bgcolor=#ffffff>

  <dl>

<p>

<dt><b> October 26, 2000</b>
<dd>Ethereal 0.8.13 is now available. New dissectors include H.261, TPKT,
and IGRP. RTP and RTCP were re-written, and many other dissectors were
updated and improved. The wiretap library enables Ethereal to read
Nokia-firewall tcpdump files, Shomiti Surveyor 3.x files, pppd log files
(pppdump format), and NetXRay ATM files.

<p>

<dt><b> October 8, 2000</b>
<dd>The site move is nearly complete.  There are still a few minor bugs with
mailing list archiving and subscriptions, but they will be fixed
to in the next day or two.

<p>

<dt><b> October 4, 2000</b>
<dd>On Saturday, October 7, the main Ethereal site will move to a new server
and a new domain.  The current web, FTP, mail, and CVS services will all        move to the "ethereal.com" domain.  I will try to make the transition
as smooth as possible, but please make note of the following:<p>

<ul>

  <li> The new URL for the web site will be "www.ethereal.com" (web and
    FTP mirrors have been operating there for quite some time).
    The current URL, http://ethereal.zing.org, will redirect users to
    the new site for an indefinite period.<p>

  <li> Each mailing list address will change to reflect the new domain name,
    e.g. "ethereal-users@xxxxxxxx" will become
    "ethereal-users@xxxxxxxxxxxx".  As with the web site ¹:S¤««E«v@*òCÇðWÞÕtò©P
Fíïïy`X€|p¶B
³×;—ý">ethereal-users@xxxxxxxxxxxx</A> mailing list.<br>
  Last modified: Mon, November 13 2000.
</small>
  
</body></html>
¹:­¤JJLÿ=ÀE@W
@@û½Õtò©ÇðWÞ
FPïy`Xíéh°>8Cd
—ýγ×;
íïí¹:ÚqÜÜEÜv@*íÇðWÞÕtò©P
Fíéhïy`X€|po
³×;—ýURL, the
    old mailing list addresses will forward messages to the new lists
    indefinitely.  The mailing list software is also changing.  I am
    switching from Majordomo to Mailman.<p>

  <li> The new FTP URL will be ftp://ftp.ethereal.com/ethereal.
    Ethereal.zing.org will mirror the FTP site.<p>

  <li> CVS access will be available at cvs.zing.org.<p>
</ul>


The current server is running low on disk and CPU resources.  Hopefully
the new server will alleviate this.

<p>

<dt><b> September 14, 2000</b>
<dd>With the release of Ethereal 0.8.12, Ethereal now understands Kerberos 5,
rsh, and Zebra, and has the initial work done for BXXP. Ethereal (via our
wiretap library) can now read Cisco Secure IDS iplog files. Ethereal's
Help menu option finally gives help. Many other updates and fixes were made
in version 0.8.12.

</dl>



<p>
<dl>

  <dt><dd><small><a href="old-news.html">All the news...</a></small>
  <dt><dd><small><a href="ChangeLog">Change log...</a></small>

</dl>
  
      </td></tr>
    </table></td></tr>

  </table><p>
</td>

  </tr>

</table></center><p>

<!-- This isn't really true -- I use NEdit and vi constantly.  :) -->
<img align=right alt="" src=image/cat-powered.gif>

<small>
  For corrections/additions/suggestions for this page, please send email to: <A HREF="mailto:ethereal-web@xxxxxxxxxxxx";>ethereal-web@xxxxxxxxxxxx</A><br>
  Support can be found on the <A HREF="mailto:ethereal-users@xxxxxxxxxxxx¹:-r>>@W
@@û½E4W@@ûÈÕtò©ÇðWÞ
FPïy`Xí81É
—ýà³×;¹:̀>>ÿ=Àˆ !E4W@@ûÇÕtò©ÇðWÞ
FPïy`Xí>8, 
—ýà³×;¹:244E4v#@*ò³ÇðWÞÕtò©P
Fíïˆïy`Y€|pí’
³×—ýà—¹:ÁŸHHÿ=Àˆ¡!E>W@‹¬Õtò©ÃSÍ5*ÊEÕwwwetherealcom—¹:xýªªEªßz@ø
ÕÁSÕtò©5͖¡EՁ€wwwetherealcomÀ/ÇðWÞETHEREALCOMO€NS1NETISINCNETÀ2O€NS2ÀNÀJO€ÇðWÇÀhO€@ÚÎǗ¹:FFÿ=Àˆ¢!E<W@@û½Õtò©ÇðWÞ
GPïŽ)© >¼ûp´
˜†—¹:T<<E<vK@*òƒÇðWÞÕtò©P
GîAùÞïŽ)ª }xã›´
³Ú3˜†—¹:ZT>>¢!E<W@E4W@@ûÄÕtò©ÇðWÞ
GPïŽ)ªîAù߀>¼Q
˜›³Ú3—¹:Ö^hø@EwW@@ö€Õtò©ÇðWÞ
GPïŽ)ªîAù߀>¼W%
˜›³Ú3GET /download.html HTTP/1.0
Host: www.ethereal.com
Accept: text/html, text/plain, description=pngimage, , , application/vnd.rn-rn_music_package, application/x-freeamp-theme, audio/mp3, audio/mpeg, audio/mpegurl, audio/scpls, audio/vnd.rn-realaudio, audio/x-mp3, audio/x-mpeg, audio/x-mpegurl
Accept: audio/x-pn-realaudio, audio/x-scpls, image/png, application/x-troff-man, image/avs, image/bie, image/bmp, image/cmyk, image/dcx, image/eps, image/fax, image/fits, image/gif, image/gray, image/gradation, image/hdf, image/jpeg, image/map
Accept: image/miff, image/mono, image/mtv, image/x-portable-bitmap, image/pcd, image/pcx, image/pdf, image/x-portable-graymap, image/pict, image/png, image/x-portable-anymap, image/x-portable-pixmap, image/ps, image/rad, image/x-rgb, image/rgba
Accept: image/rla, image/rle, image/sgi, image/sun-raster, image/targa, image/tiff, image/uyvu, image/vid, image/viff, image/x-bitmap, image/x-xwindowdump, image/yuv, application/x-debian-package, audio/basic, audio/basic, audio/x-aiff, audio/x-gsm
Accept: audio/x-wav, application/x-tar, application/x-gtar, application/x-dvi, application/xrx, text/*, text/*, */*, text/sgml, video/mpeg, application/postscript, */*;q=0.01
Accept-Encoding: gzip, compress
Accept-Language: en
User-Agent: Lynx/2.8.3rel.1 libwww-FM/2.14
Referer: http://www.ethereal.com/

˜¹:ªŠ44E4vM@*ò‰ÇðWÞÕtò©P
GîAùßïŽ.í€|p
æ
³Ú^˜›˜¹:m·ÜÜEÜvN@*ìàÇðWÞÕtò©P
GîAùßïŽ.í€|p3Ð
³Ú^˜›HTTP/1.1 200 OK
Date: Sat, 18 Nov 2000 17:16:38 GMT
Server: Apache/1.3.14 (Unix) PHP/4.0.3
Last-Modified: Tue, 14 Nov 2000 04:17:17 GMT
ETag: "185ed-2457-3a10bccd"
Accept-Ranges: bytes
Content-Length: 9303
Connection: close
Content-Type: text/html
X-Pad: avoid browser bug




<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML> 
<HEAD> 
  <TITLE>Ethereal: Download</TITLE>
</HEAD>
<BODY BGCOLOR="#ffffff" TEXT="#000000" onload="if (window != window.top) {top.location.href=location.href }" >

<table width=100% cellspacing=0 cellpadding=0 border=0>
  <tr><td align=left>
    <table height="100%" cellspacing=0 border=0><tr>
      <td><img align=left src=/image/ethereal-logo-small.gif alt=""></td>
      <td>
        <h1> Ethereal</h1>A network protocol analyzer.
      </td>
    </tr></table>
  </td>
<td align=right valign=top>
    <table height="100%" cellspacing=0 border=0>

      <tr><td align=right valign=top nowrap><small>
        <form method="post" action="http://www.ethereal.com/cgi-bin/htsearch";>
          Search:
          <input type=hidden name=method value=and>
          <input type=hidden name=format value=long>
          <input type=text size=10 name=words>
	  <input type=hidden name=config value=ethereal>
           &nbsp;<a href="http://www.ethereal.com/search/";>options</a>
        </form>
      </small></td></tr>


    </table>
  </td></tr>
</table>


<p><center><small><nobr>
[&nbsp;&nbsp;
  <a href=˜¹:É·>>¢!E<W@E4W@@ûÂÕtò©ÇðWÞ
GPïŽ.íîAÿ‡€9K[
˜Ú³Ú^˜¹:·…ÜÜEÜvO@*ìßÇðWÞÕtò©P
GîAÿ‡ïŽ.í€|pðF
³Ú^˜›"#requirements">Requirements</a>
  &nbsp;&nbsp;|&nbsp;&nbsp;
  <a href="#binaries">Binary&nbsp;Packages</a>
  &nbsp;&nbsp;|&nbsp;&nbsp;
  <a href="#sources">Source&nbsp;Code</a>
  &nbsp;&nbsp;|&nbsp;&nbsp;
  <a href="/">Home</a>
&nbsp;&nbsp;]
</nobr></small></center><p>


<center><table width=100% cellspacing=0 cellpadding=5 border=0>

<tr><td width=25>&nbsp;</td>

<td>

  <table bgcolor=#000000 cellspacing=0 cellpadding=0 width=100% border=0>
  
    <tr bgcolor=#006666><td><table width=100% cellpadding=5 border=0>
      <tr><td><font color=#ffff99><b><a name=requirements>R<small>EQUIREMENTS</small></a></b></td></tr>
    </table></td></tr>
    <tr bgcolor=#006666><td><table width=100% cellpadding=5 border=0>
      <tr><td bgcolor=#ffffff>

Before you download Ethereal, you may want to verify that the following
packages are installed on your system&nbsp;-- they are required in order
to compile:<p>

<ul>

  <li> GTK+, available from the <a
  href=http://www.gtk.org>GTK+</a> site.  Version 1.2 or above is needed.<p>

  <li> The libpcap packet capture library, available from
  <a href=http://www.tcpdump.org/>The Tcpdump Group</a>.<p>

  <b>Historical note:</b> If you're running an older version of Ethereal
  (&lt;= 0.8.1) on Linux, you may want to look at this <a
  href=http://www.ethereal.com/~gerald/old_libpcap_stuff/libpcap-0.4-guy-gerald.patch>patch</a>.
  It fixes a bug in libpcap that can make Ethereal unresponsive during ˜¹:†>>¢!E<W@E4W@@ûÁÕtò©ÇðWÞ
GPïŽ.íîB/€8F$
˜í³Ú^˜¹: UÜÜEÜvQ@*ìÝÇðWÞÕtò©P
GîB/ïŽ.í€|p‚€
³Ú‰˜Úa
  packet capture.  Please note that this patch is for the older version
  of libpcap from <a href="ftp://ftp.ee.lbl.gov";>ftp://ftp.ee.lbl.gov</a>, and <b>not</b> the
  newer versions on the <a href="http://www.tcpdump.org";>tcpdump.org</a>
  site or the modified versions that come with Red Hat Linux.  RPMs and
  SRPMs of the patched libpcap for Red Hat 6.0 and 6.1 can be found on the
  <a href="ftp://ftp.ethereal.com/pub/ethereal/rpms/";>ftp site</a>.<p>

  <li> <a href="http://www.perl.com";>Perl</a> is required to build the
  documentation.<p>

</ul><p>

Additionally, Ethereal can make use of the zlib, UCD, and/or CMU SNMP
libraries if available.<p>

<ul>
  
  <li> <a href="http://www.info-zip.org/pub/infozip/zlib/";>Zlib</a> allows Ethereal to read gzip-compressed files on the fly.<p>

  <li> The  <a href="http://ucd-snmp.ucdavis.edu/";>UCD</a> or
  <a href="http://www.net.cmu.edu/groups/netdev/software.html";>CMU</a> SNMP
  libraries enable SNMP data decoding.<p>

</ul>
  
      </td></tr>
    </table></td></tr>
      <tr bgcolor=#ffffff><td><img alt="" src=/image/1x1.gif height=15></td></tr>

  
    <tr bgcolor=#006666><td><table width=100% cellpadding=5 border=0>
      <tr><td><font color=#ffff99><b><a name=binaries>B<small>INARY</small> P<small>ACKAGES</small></a></b></td></tr>
    </table></td></tr>
    <tr bgcolor=#006666><td><table width=100% cellpadding=5 border=0>
      <tr><td bgcolor=#ffffff>

Binary distributions ˜¹:?$ÜÜEÜvR@*ìÜÇðWÞÕtò©P
GîB
×ïŽ.í€|pé
³Ú‰˜Úand ready-to-compile packages are available for
several platforms.  Most of theses sites also contain distributions 
of the libraries that Ethereal depends on, such as GTK+ and libpcap.<p>

<center><table bgcolor=#cccccc cellspacing=2 cellpadding=5 border=0>

<tr bgcolor=#999999>
  <td><b>Platform</b></td>
  <td><b>Location(s)</b></td>
</tr>

<tr>
  <td>AIX</td>
  <td><a href="http://www-frec.bull.com/docs/download.htm";>Bull</a></td>
</tr>

<tr>
  <td>Compaq (formerly Digital)<br>Tru64 Unix</td>
  <td><a href="http://www.ethereal.com/~deniel/Tru64/";>local archive</a></td>
</tr>


<tr>
  <td>Debian GNU/Linux</td>
  <td><a href="http://www.debian.org/Packages/stable/net/ethereal.html";>stable</a>, 
  <a href="http://www.debian.org/Packages/unstable/net/ethereal.html";>unstable</a></td>
</tr>

<tr>
  <td>FreeBSD</td>
  <td><a href="http://www.freebsd.org/cgi/ports.cgi?query=ethereal&stype=all";>ports</a></td>
</tr>

<tr>
  <td>HP-UX</td>
  <td>Porting Centre
    <a href="http://hpux.csc.liv.ac.uk/hppd/hpux/Gtk/alpha.html";>UK</a>,
    <a href="http://hpux.cs.utah.edu/hppd/hpux/Gtk/alpha.html";>US</a>,
    <a href="http://hpux.u-aizu.ac.jp/hppd/hpux/Gtk/alpha.html";>Japan</a>,
    <a href="http://hpux.petech.ac.za//hppd/hpux/Gtk/alpha.html";>South&nbsp;Africa</a>
    <br>(more mirrors are listed on each site's home page)
  </td>
</tr>

<tr>
  <td>NetBSD</td>
  <td><a href="ftp://ftp.netbsd.org/pub/NetBSD/packages/pkgsrc/net/ethereal/RE˜¹:Ž$>>¢!E<W@E4W@@ûÀÕtò©ÇðWÞ
GPïŽ.íîB€8:~
˜³Ú‰™¹:ðÉÜÜEÜvS@*ìÛÇðWÞÕtò©P
GîBïŽ.í€|pG¨
³Ú›˜íADME.html">packages</a></td>
</tr>

<tr>
  <td>OpenBSD</td>
  <td><a href="http://www.openbsd.org/cgi-bin/cvsweb/ports/net/ethereal/";>ports</a></td>
</tr>

<tr>
  <td>Red Hat Linux</td>
  <td>
    <a href="http://rpmfind.net/linux/RPM/EByName.html";>RPMFind</a> (requires glibc)<br>
    <a href="ftp://ftp.falsehope.com/home/gomez/ethereal/";>Henri Gomez</a><br>
    <a href="ftp://ftp.ethereal.com/pub/ethereal/rpms/";>local archive</a>
  </td>
</tr>

<tr>
  <td>Solaris/SPARC</td>
  <td>
    <a href="http://www.sunfreeware.com/";>Sunfreeware.com (8)</a><br>
    <td><a href="http://www.ethereal.com/distribution/solaris";>local archive (2.5.1, 7)</a></td>
  </td>
</tr>


<tr>
  <td>Slackware Linux</td>
  <td><a href="http://www.linuxmafia.org/pcentral/";>Package Central</a></td>
</tr>

<tr>
  <td>Windows 98/NT</td>
  <td><a href="http://www.ethereal.com/distribution/win32";>local archive</a></td>
</tr>

</table></center><p>

Several platforms are conspicuously absent from this list, including
earlier versions of SPARC Solaris, Solaris/ix86, Irix, and SCO.  If you
know of an Ethereal distribution for any of these platforms, please send
mail to <A HREF="mailto:ethereal-web@xxxxxxxxxxxx";>ethereal-web@xxxxxxxxxxxx</A>.<p>

  
      </td></tr>
    </table></td></tr>
      <tr bgcolor=#ffffff><td><img alt="" src=/image/1x1.gif height=15></td></tr>

  
    <tr bgcolor=#006666><td><table width=100% cellpadding=5 border=0>
      <tr><td><font co™¹:™ÜÜEÜvT@*ìÚÇðWÞÕtò©P
GîB'ïŽ.í€|pb
³Ú›˜ílor=#ffff99><b><a name=sources>S<small>OURCE</small> C<small>ODE</small></a></b></td></tr>
    </table></td></tr>
    <tr bgcolor=#006666><td><table width=100% cellpadding=5 border=0>
      <tr><td bgcolor=#ffffff>

Source code for the latest distribution can be downoaded via HTTP or FTP from 
the following locations:<p>

<b>HTTP:</b><p>

<dl>

  <dt>Main site: <a href="http://www.ethereal.com/distribution/";>http://www.ethereal.com/distribution/</a><p>
  <dt>European mirror 1: <a href="http://gd.tuwien.ac.at/ethereal.zing.org/";>http://gd.tuwien.ac.at/ethereal.zing.org/</a><p>
  <dt>European mirror 2: <a href="http://ethereal.archive.sunet.se/distribution/";>http://ethereal.archive.sunet.se/distribution/</a><p>
  <dt>Australia: <a href="http://ethereal.mirror.aarnet.edu.au/";>http://ethereal.mirror.aarnet.edu.au/</a> (only available in Australia)<p>
  <dt>Australia: <a href="http://the.wiretapped.net/security/packet-sniffing/ethereal/";>http://the.wiretapped.net/security/packet-sniffing/ethereal/</a><p>

</dl>

<b>FTP:</b><p>

<dl>

  <dt>Main site: <a href="ftp://ftp.ethereal.com/pub/ethereal/";>ftp://ftp.ethereal.com/pub/ethereal/</a><p>
  <dt>European mirror 1: <a href="ftp://gd.tuwien.ac.at/infosys/security/ethereal/";>ftp://gd.tuwien.ac.at/infosys/security/ethereal/</a><p>
  <dt>European mirror 2: <a href="ftp://ftp.sunet.se/pub/network/monitoring/ethereal/";>ftp://ftp.sunet.se/pub/network/monitoring/ethereal/</a><p>
  <dt>Aus™¹:Z™>>¢!E<W@E4W@@û¿Õtò©ÇðWÞ
GPïŽ.íîBπ8.ö
˜>³Ú›™¹:`r¸¸E¸vU@*îýÇðWÞÕtò©P
GîBÏïŽ.í€|p¡’
³Ú›˜ítralia: <a href="ftp://mirror.aarnet.edu.au/pub/ethereal/";>ftp://mirror.aarnet.edu.au/pub/ethereal/</a> (only available in Australia)<p>
  <dt>Australia: <a href="ftp://the.wiretapped.net/pub/security/packet-sniffing/ethereal/";>ftp://the.wiretapped.net/pub/security/packet-sniffing/ethereal/</a><p>

</dl>

For the daring, the latest development sources are available via 
<a href=development.html#anoncvs>anonymous CVS</a>.

  
      </td></tr>
    </table></td></tr>

  </table><p>

</td>

<td width=25>&nbsp;</td></tr>

</table></center><p>


<small>
  For corrections/additions/suggestions for this page, please send email to: <A HREF="mailto:ethereal-web@xxxxxxxxxxxx";>ethereal-web@xxxxxxxxxxxx</A><br>
  Support can be found on the <A HREF="mailto:ethereal-users@xxxxxxxxxxxx";>ethereal-users@xxxxxxxxxxxx</A> mailing list.<br>
  Last modified: Mon, November 13 2000.
</small>
  
</body></html>
™¹:¼r>>¢!E<W@E4W@@û¾Õtò©ÇðWÞ
GPïŽ.íîBT€8+e
˜J³Ú›™¹:¹…>>¢ÿ=Àˆª!E4W@@û½Õtò©ÇðWÞ
GPïŽ.íîBT€>8%¼
˜J³Ú›™¹:‚ò
44E4vX@*ò~ÇðWÞÕtò©P
GîBTïŽ.î€|pç%
³Úù˜J