On Fri, Oct 03, 2003 at 07:36:19PM +1000, Ronnie Sahlberg wrote: > From: "Philip" > > > network data (src, dst, ack, nack,enq etc.) Ever since the network I will > > have > > to exam does only support arcnet and no higher level protocol (eg. IP)... > > I therefor can't use a sniffer which can handle (e.g. TCP/IP) traffic over > > ARCNet > > because I only want and can see ARCNet... well well, think I just have > > to try it out :-/ > > Use Edit/Protocols and disable ARP and IP and then you should only see the > actual ARCNet packets and > ethereal will not attempt to decode the payload.
If there's no IP traffic on his network, as he's saying is the case, he doesn't need to disable them - they won't be decoded. However, I presume there's *some* protocol running atop ARCNET; Ethereal also attempts to decode Appletalk, IPX, Banyan Vines, and BACnet atop ARCNET.
