On Mon, Jun 24, 2002 at 07:25:13AM -0500, Frank Singleton wrote: > Also, the T1 interface device will not be present as > like "eth0" or "lo" etc , so is there a "raw" input mode > I can use.
Currently, the only devices on which Ethereal can capture are devices supported by libpcap/WinPcap, which currently means devices supported by the OS's packet capture mechanism (or that mechanism plus the WinPcap driver, on Windows). Those mechanisms don't plug into raw devices, although on BSD you might be able to rig something up (on systems using DLPI, such as Solaris and HP-UX, and on Linux and Windows, the packet capture mechanism more directly plugs into the networking code, so that might be harder). On UNIX systems, you could write a program that reads the device and writes out a tcpdump file, send that program's output to a FIFO, and tell Ethereal to capture from the FIFO.
