Wireshark · Ethereal-users: Re: [Ethereal-users] New user whith proplem

[Guy Harris <guy@xxxxxxxxxx>]

> I  recently installed ethereal on a hp C360 running hp-UX 10-20.
> When I capture data I can only see the traffic getting in  of the Ethernet
> interface. I 
> do not see any  traffic getting out.

You have to turn on a flag in the kernel on 10.20 to see outgoing
traffic.  If you've downloaded Ethereal source, the "README.hpux" file
explains what's involved; I don't know whether the binaries from, say,
the HP-UX Porting And Archive Center include that file (they should,
given that issue, but perhaps they don't) - if you don't have that file,
it can be found at the following URL:

	http://www.ethereal.com/cgi-bin/cvsweb.cgi/ethereal/README.hpux?rev=1.15&content-type=text/plain

> When I open a capture file from HP nettl I often get network protocol not
> supported. It seam to work on small capture. Is it there a default file
> size to open

No, there is no default file size.

However, smaller captures may be less likely to capture packets that
Ethereal doesn't know how to read; not *all* packet types in nettl are
supported by Ethereal.