On Fri, Oct 03, 2003 at 10:44:34AM +0200, Philip wrote: > Yes thats true. ARCNet is ARCNet, whether it transports TCP/IP data or not. > What I am actually looking for is a sniffer, which can 'decode' the ARCNet > network data (src, dst, ack, nack,enq etc.)
The first thing you need for that is a network analyzer (Network Associates gets peeved if you use the "s" word, as they have a trademark on it) that can *capture* that data. It looks as if for BSD and Linux (the only platforms for which I've seen the OS kernel's ARCNET code), the source and destination addresses are supplied. I can't speak for Windows, and don't know of any other OSes that would support capturing on ARCNET. I don't see anything in Ethereal that shows low-level ack/nak/enq/etc. information, and don't see anything obvious in the Linux code for them - it might be that those are handled by the ARCNET network device rather than by the OS. If so, Ethereal won't be able to capture them. (I'm not an ARCNET expert, and don't have the standards handy, so I don't know the details of the ack/nak/enq stuff.)
