Re: Facing a problem when I try to capture NetBeui packet (NBF) of ether frames

[Guy Harris <guy () alum mit edu>]

On Thu, May 27, 2004 at 02:38:57PM +0800, Bassam A. Al-Khaffaf wrote:
> But for other ether frame protocols such as arp, rarp and ip there is no
> problem and they work.

Try just

        tcpdump netbeui

"ether proto" expects a protocol with an Ethernet type value - but
NetBEUI doesn't have an Ethernet type value (it runs atop 802.2, not
atop raw Ethernet, so the NetBEUI frames don't have an Ethernet type
field, they have a length field).
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.