- 5.34 When I capture on Windows in promiscuous mode, I can see packets
- other than those sent to or from my machine; however, those packets
- show up with a "Short Frame" indication, unlike packets to or from my
- machine. What should I do to arrange that I see those packets in their
- entirety?
-
- 5.35 I'm capturing packets on a machine on a VLAN; why don't the
- packets I'm capturing have VLAN tags?
-
- 5.36 How can I capture raw 802.11 packets, including non-data
- (management, beacon) packets?
-
- 5.37 I'm trying to capture 802.11 traffic on Windows; why am I not
- seeing any packets?
-
- 5.38 I'm trying to capture 802.11 traffic on Windows; why am I seeing
- packets received by the machine on which I'm capturing traffic, but
- not packets sent by that machine?
-
- 5.39 How can I capture packets with CRC errors?
-
- 5.40 How can I capture entire frames, including the FCS?
-
- 5.41 Ethereal hangs after I stop a capture.
-
- 5.42 How can I search for, or filter, packets that have a particular
- string anywhere in them?
-
-General Questions
-
- Q 1.1: Where can I get help?
-
- A: Support is available on the ethereal-users mailing list.
- Subscription information and archives for all of Ethereal's mailing
- lists can be found at http://www.ethereal.com/lists
-
- Q 1.2: What protocols are currently supported?
-
- A: There are currently 442 supported protocols and media, listed
- below. Descriptions can be found in the ethereal(1) man page.
-
- 802.1q Virtual LAN
- 802.1x Authentication
- AAL type 2 signalling protocol - Capability set 1 (Q.2630.1)
- AFS (4.0) Replication Server call declarations
- ANSI A-I/F BSMAP
- ANSI A-I/F DTAP
- ANSI IS-637-A (SMS) Teleservice Layer
- ANSI IS-637-A (SMS) Transport Layer
- ANSI IS-683-A (OTA (Mobile))
- ANSI Mobile Application Part
- AOL Instant Messenger
- ARCNET
- ATM
- ATM AAL1
- ATM AAL3/4
- ATM LAN Emulation
- ATM OAM AAL
- AVS WLAN Capture header
- Ad hoc On-demand Distance Vector Routing Protocol
- Address Resolution Protocol
- Aggregate Server Access Protocol
- Alert Standard Forum
- Alteon - Transparent Proxy Cache Protocol
- Andrew File System (AFS)
- Apache JServ Protocol v1.3
- AppleTalk Filing Protocol
- AppleTalk Session Protocol
- AppleTalk Transaction Protocol packet
- Appletalk Address Resolution Protocol
- Application Configuration Access Protocol
- Async data over ISDN (V.120)
- Authentication Header
- BACnet Virtual Link Control
- BSS GPRS Protocol
- BSSAP/BSAP
- Banyan Vines ARP
- Banyan Vines Echo
- Banyan Vines Fragmentation Protocol
- Banyan Vines ICP
- Banyan Vines IP
- Banyan Vines IPC
- Banyan Vines LLC
- Banyan Vines RTP
- Banyan Vines SPP
- Bearer Independent Call Control
- Bi-directional Fault Detection Control Message
- Blocks Extensible Exchange Protocol
- Boardwalk
- Boot Parameters
- Bootstrap Protocol
- Border Gateway Protocol
- Building Automation and Control Network APDU
- Building Automation and Control Network NPDU
- CCSDS
- CDS Clerk Server Calls
- Check Point High Availability Protocol
- Checkpoint FW-1
- Cisco Auto-RP
- Cisco Discovery Protocol
- Cisco Group Management Protocol
- Cisco HDLC
- Cisco Hot Standby Router Protocol
- Cisco ISL
- Cisco Interior Gateway Routing Protocol
- Cisco NetFlow
- Cisco SLARP
- Clearcase NFS
- CoSine IPNOS L2 debug output
- Common Open Policy Service
- Common Unix Printing System (CUPS) Browsing Protocol
- Connectionless Lightweight Directory Access Protocol
- Cross Point Frame Injector
- DCE DFS Calls
- DCE Distributed Time Service Local Server
- DCE Distributed Time Service Provider
- DCE Name Service
- DCE RPC
- DCE Security ID Mapper
- DCE/RPC BOS Server
- DCE/RPC BUDB
- DCE/RPC BUTC
- DCE/RPC CDS Solicitation
- DCE/RPC Conversation Manager
- DCE/RPC Endpoint Mapper
- DCE/RPC Endpoint Mapper4
- DCE/RPC FLDB
- DCE/RPC FLDB UBIK TRANSFER
- DCE/RPC FLDB UBIKVOTE
- DCE/RPC ICL RPC
- DCE/RPC Kerberos V
- DCE/RPC RS_ACCT
- DCE/RPC RS_BIND
- DCE/RPC RS_MISC
- DCE/RPC RS_PROP_ACCT
- DCE/RPC RS_UNIX
- DCE/RPC Remote Management
- DCE/RPC Repserver Calls
- DCE/RPC TokenServer Calls
- DCE/RPC UpServer
- DCOM OXID Resolver
- DCOM Remote Activation
- DEC Spanning Tree Protocol
- DHCPv6
- DNS Control Program Server
- Data
- Data Link SWitching
- Data Stream Interface
- Datagram Delivery Protocol
- Diameter Protocol
- Distance Vector Multicast Routing Protocol
- Distcc Distributed Compiler
- Distributed Checksum Clearinghouse Prototocl
- Domain Name Service
- Dynamic DNS Tools Protocol
- Echo
- Encapsulating Security Payload
- Enhanced Interior Gateway Routing Protocol
- EtherNet/IP (Industrial Protocol)
- Ethernet
- Ethernet over IP
- Extensible Authentication Protocol
- FC Extended Link Svc
- FC Fabric Configuration Server
- FCIP
- FTP Data
- FTServer Operations
- Fiber Distributed Data Interface
- Fibre Channel
- Fibre Channel Common Transport
- Fibre Channel Fabric Zone Server
- Fibre Channel Name Server
- Fibre Channel Protocol for SCSI
- Fibre Channel SW_ILS
- Fibre Channel Security Protocol
- Fibre Channel Single Byte Command
- File Transfer Protocol (FTP)
- Financial Information eXchange Protocol
- Frame
- Frame Relay
- GARP Multicast Registration Protocol
- GARP VLAN Registration Protocol
- GPRS Network service
- GPRS Tunneling Protocol
- GSM A-I/F BSSMAP
- GSM A-I/F DTAP
- GSM A-I/F RP
- GSM Mobile Application Part
- GSM SMS TPDU (GSM 03.40)
- General Inter-ORB Protocol
- Generic Routing Encapsulation
- Generic Security Service Application Program Interface
- Gnutella Protocol
- H225
- H245
- H4501
- HP Extended Local-Link Control
- HP Remote Maintenance Protocol
- Hummingbird NFS Daemon
- HyperSCSI
- Hypertext Transfer Protocol
- ICQ Protocol
- IEEE 802.11 wireless LAN
- IEEE 802.11 wireless LAN management frame
- ILMI
- IP Over FC
- IP Payload Compression
- IPX Message
- IPX Routing Information Protocol
- IPX WAN
- ISDN
- ISDN Q.921-User Adaptation Layer
- ISDN User Part
- ISO 10589 ISIS InTRA Domain Routeing Information Exchange Protocol
- ISO 8073 COTP Connection-Oriented Transport Protocol
- ISO 8327-1 OSI Session Protocol
- ISO 8473 CLNP ConnectionLess Network Protocol
- ISO 8602 CLTP ConnectionLess Transport Protocol
- ISO 9542 ESIS Routeing Information Exchange Protocol
- ITU-T Recommendation H.261
- ITU-T Recommendation H.263 RTP Payload header (RFC2190)
- InMon sFlow
- Intel ANS probe
- Intelligent Platform Management Interface
- Inter-Access-Point Protocol
- Interbase
- Internet Cache Protocol
- Internet Content Adaptation Protocol
- Internet Control Message Protocol
- Internet Control Message Protocol v6
- Internet Group Management Protocol
- Internet Group membership Authentication Protocol
- Internet Message Access Protocol
- Internet Printing Protocol
- Internet Protocol
- Internet Protocol Version 6
- Internet Relay Chat
- Internet Security Association and Key Management Protocol
- Internetwork Packet eXchange
- Jabber XML Messaging
- Java RMI
- Java Serialization
- Kerberos
- Kerberos Administration
- Kernel Lock Manager
- LWAP Control Message
- LWAPP Encapsulated Packet
- LWAPP Layer 3 Packet
- Label Distribution Protocol
- Laplink
- Layer 2 Tunneling Protocol
- Lightweight Directory Access Protocol
- Line Printer Daemon Protocol
- Link Access Procedure Balanced (LAPB)
- Link Access Procedure Balanced Ethernet (LAPBETHER)
- Link Access Procedure, Channel D (LAPD)
- Link Aggregation Control Protocol
- Link Management Protocol (LMP)
- Linux cooked-mode capture
- Local Management Interface
- LocalTalk Link Access Protocol
- Logical-Link Control
- Lucent/Ascend debug output
- MDS Header
- MMS Message Encapsulation
- MS Kpasswd
- MS Proxy Protocol
- MSN Messenger Service
- MSNIP: Multicast Source Notification of Interest Protocol
- MTP 2 Transparent Proxy
- MTP 2 User Adaptation Layer
- MTP 3 User Adaptation Layer
- MTP2 Peer Adaptation Layer
- Message Transfer Part Level 2
- Message Transfer Part Level 3
- Message Transfer Part Level 3 Management
- Microsoft Directory Replication Service
- Microsoft Distributed File System
- Microsoft Exchange MAPI
- Microsoft Local Security Architecture
- Microsoft Local Security Architecture (Directory Services)
- Microsoft Messenger Service
- Microsoft Network Logon
- Microsoft Registry
- Microsoft Security Account Manager
- Microsoft Server Service
- Microsoft Service Control
- Microsoft Spool Subsystem
- Microsoft Task Scheduler Service
- Microsoft Telephony API Service
- Microsoft Windows Browser Protocol
- Microsoft Windows Lanman Remote API Protocol
- Microsoft Windows Logon Protocol
- Microsoft Workstation Service
- Mobile IP
- Mobile IPv6
- Modbus/TCP
- Mount Service
- MultiProtocol Label Switching Header
- Multicast Router DISCovery protocol
- Multicast Source Discovery Protocol
- MySQL Protocol
- NFSACL
- NFSAUTH
- NIS+
- NIS+ Callback
- NSPI
- NTLM Secure Service Provider
- Name Binding Protocol
- Name Management Protocol over IPX
- NetBIOS
- NetBIOS Datagram Service
- NetBIOS Name Service
- NetBIOS Session Service
- NetBIOS over IPX
- NetWare Core Protocol
- NetWare Link Services Protocol
- Network Data Management Protocol
- Network File System
- Network Lock Manager Protocol
- Network News Transfer Protocol
- Network Status Monitor CallBack Protocol
- Network Status Monitor Protocol
- Network Time Protocol
- Nortel SONMP
- Novell Distributed Print System
- Null/Loopback
- Open Shortest Path First
- OpenBSD Encapsulating device
- OpenBSD Packet Filter log file
- OpenBSD Packet Filter log file, pre 3.4
- PC NFS
- PPP Bandwidth Allocation Control Protocol
- PPP Bandwidth Allocation Protocol
- PPP CDP Control Protocol
- PPP Callback Control Protocol
- PPP Challenge Handshake Authentication Protocol
- PPP Compressed Datagram
- PPP Compression Control Protocol
- PPP IP Control Protocol
- PPP IPv6 Control Protocol
- PPP Link Control Protocol
- PPP MPLS Control Protocol
- PPP Multilink Protocol
- PPP Multiplexing
- PPP Password Authentication Protocol
- PPP VJ Compression
- PPP-over-Ethernet Discovery
- PPP-over-Ethernet Session
- PPPMux Control Protocol
- Packed Encoding Rules (ASN.1 X.691)
- Point-to-Point Protocol
- Point-to-Point Tunnelling Protocol
- Portmap
- Post Office Protocol
- Pragmatic General Multicast
- Prism
- Privilege Server operations
- Protocol Independent Multicast
- Q.2931
- Q.931
- Q.933
- Quake II Network Protocol
- Quake III Arena Network Protocol
- Quake Network Protocol
- QuakeWorld Network Protocol
- Qualified Logical Link Control
- RFC 2250 MPEG1
- RFC 2833 RTP Event
- RIPng
- RPC Browser
- RS Interface properties
- RSTAT
- RSYNC File Synchroniser
- RX Protocol
- Radio Access Network Application Part
- Radius Protocol
- Raw packet data
- Real Time Streaming Protocol
- Real-Time Transport Protocol
- Real-time Transport Control Protocol
- Registry Server Attributes Manipulation Interface
- Registry server administration operations.
- Remote Management Control Protocol
- Remote Override interface
- Remote Procedure Call
- Remote Program Load
- Remote Quota
- Remote Shell
- Remote Shutdown
- Remote Wall protocol
- Remote sec_login preauth interface.
- Resource ReserVation Protocol (RSVP)
- Rlogin Protocol
- Routing Information Protocol
- Routing Table Maintenance Protocol
- SADMIND
- SCSI
- SEBEK - Kernel Data Capture
- SGI Mount Service
- SMB (Server Message Block Protocol)
- SMB MailSlot Protocol
- SMB Pipe Protocol
- SNA-over-Ethernet
- SNMP Multiplex Protocol
- SPNEGO-KRB5
- SPRAY
- SS7 SCCP-User Adaptation Layer
- SSCOP
- SSH Protocol
- Secure Socket Layer
- Sequenced Packet eXchange
- Service Advertisement Protocol
- Service Location Protocol
- Session Announcement Protocol
- Session Description Protocol
- Session Initiation Protocol
- Session Initiation Protocol (SIP as raw text)
- Short Message Peer to Peer
- Signalling Connection Control Part
- Signalling Connection Control Part Management
- Simple Mail Transfer Protocol
- Simple Network Management Protocol
- Simple Traversal of UDP Through NAT
- Sinec H1 Protocol
- Skinny Client Control Protocol
- SliMP3 Communication Protocol
- Socks Protocol
- Spanning Tree Protocol
- Spnego
- Stream Control Transmission Protocol
- Synchronous Data Link Control (SDLC)
- Syslog message
- Systems Network Architecture
- Systems Network Architecture XID
- T38
- TACACS
- TACACS+
- TEREDO Tunneling IPv6 over UDP through NATs
- TPKT
- Tabular Data Stream
- Tazmen Sniffer Protocol
- Telnet
- Time Protocol
- Time Synchronization Protocol
- Token-Ring
- Token-Ring Media Access Control
- Transaction Capabilities Application Part
- Transmission Control Protocol
- Transparent Network Substrate Protocol
- Trivial File Transfer Protocol
- UDP Encapsulation of IPsec Packets
- Universal Computer Protocol
- User Datagram Protocol
- Virtual Router Redundancy Protocol
- Virtual Trunking Protocol
- WAP Binary XML
- Web Cache Coordination Protocol
- Wellfleet Breath of Life
- Wellfleet Compression
- Wellfleet HDLC
- Who
- Windows 2000 DNS
- Wireless Session Protocol
- Wireless Transaction Protocol
- Wireless Transport Layer Security
- X Display Manager Control Protocol
- X.25
- X.25 over TCP
- X.29
- X11
- Xyplex
- Yahoo Messenger Protocol
- Yahoo YMSG Messenger Protocol
- Yellow Pages Bind
- Yellow Pages Passwd
- Yellow Pages Service
- Yellow Pages Transfer
- Zebra Protocol
- Zone Information Protocol
- eDonkey Protocol
- iSCSI
- iSNS
-
- Q 1.3: Are there any plans to support {your favorite protocol}?
-
- A: Support for particular protocols is added to Ethereal as a result
- of people contributing that support; no formal plans for adding
- support for particular protocols in particular future releases exist.
-
- Q 1.4: Can Ethereal read capture files from {your favorite network