Re: Can not see any FC frames

Logen Song <[email protected]> Mon, 9 Oct 2006 14:26:38 -0700 (PDT)
Newsgroups gmane.network.ethereal.user
Message-ID <[email protected]>
--===============0242054661==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-------------------
The Ethereal project is being continued at a new site.  Please go to
http://www.wireshark.org and subscribe to [email protected].
Don't forget to unsubscribe from this list at
http://www.ethereal.com/mailman/listinfo/ethereal-users
-------------------


--===============0242054661==
Content-Type: multipart/alternative; boundary="0-626675720-1160429198=:79072"
Content-Transfer-Encoding: 7bit

--0-626675720-1160429198=:79072
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Thanks for the reply.
  =20
  The ethernet ports on the PAA and the machine running the ethereal are =
connected to the same hub.
  =20
  It sees all the IP packets, but not the FC packets...any clues?
 =20

Guy Harris <[email protected]> wrote:
  -------------------
The Ethereal project is being continued at a new site. Please go to
http://www.wireshark.org and subscribe to [email protected].
Don't forget to unsubscribe from this list at
http://www.ethereal.com/mailman/listinfo/ethereal-users
-------------------


On Oct 6, 2006, at 11:23 AM, Logen Song wrote:

> -------------------
> The Ethereal project is being continued at a new site. Please go to
> http://www.wireshark.org and subscribe to [email protected]=
=20
> .
> Don't forget to unsubscribe from this list at
> http://www.ethereal.com/mailman/listinfo/ethereal-users
> -------------------
>
> Quick Question,
>
> Connected a DS-PAA-2 to the IP and FC network. SPAN is configured.
> After lunching ethereal, we see the TCP/IP packets only, no FC=20
> packets.

So is the Ethernet port of the MDS 9000 Port Analyzer Adapter:

directly plugged into an Ethernet port on the machine running Ethereal?

plugged into a hub into which an Ethernet port on the machine running=20
Ethereal is also plugged?

plugged into a switch into which an Ethernet port on the machine=20
running Ethereal is also plugged?

NOTE: not everything called a "hub" is a hub; some are switches. See

http://wiki.wireshark.org/HubReference


> Click the Filter, not even find FC as an option.

That's for display filters, which don't affect what traffic you capture.

A *display* filter for Fibre Channel traffic would be "fc", not "FC".

A *capture* filter for it would either be

ether proto 0xfcfc

or

ether proto 0

assuming that the encapsulation dissected by the "MDS Header"=20
dissector is the one used by the Port Analyzer Adapter.
_______________________________________________
Ethereal-users mailing list
[email protected]
http://www.ethereal.com/mailman/listinfo/ethereal-users


--0-626675720-1160429198=:79072
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<div>Thanks for the reply.</div>  <div>&nbsp;</div>  <div>The ethernet po=
rts on the PAA&nbsp;and the machine running the ethereal are&nbsp;connect=
ed to the same hub.</div>  <div>&nbsp;</div>  <div>It sees all the IP pac=
kets, but not the FC packets...any clues?</div>  <div><BR><BR><B><I>Guy H=
arris &lt;[email protected]&gt;</I></B> wrote:</div>  <BLOCKQUOTE class=3D=
replbq style=3D"PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #1010ff=
 2px solid">-------------------<BR>The Ethereal project is being continue=
d at a new site. Please go to<BR>http://www.wireshark.org and subscribe t=
o [email protected].<BR>Don't forget to unsubscribe from this=
 list at<BR>http://www.ethereal.com/mailman/listinfo/ethereal-users<BR>--=
-----------------<BR><BR><BR>On Oct 6, 2006, at 11:23 AM, Logen Song wrot=
e:<BR><BR>&gt; -------------------<BR>&gt; The Ethereal project is being =
continued at a new site. Please go to<BR>&gt; http://www.wireshark.org an=
d subscribe to
 [email protected] <BR>&gt; .<BR>&gt; Don't forget to unsubsc=
ribe from this list at<BR>&gt; http://www.ethereal.com/mailman/listinfo/e=
thereal-users<BR>&gt; -------------------<BR>&gt;<BR>&gt; Quick Question,=
<BR>&gt;<BR>&gt; Connected a DS-PAA-2 to the IP and FC network. SPAN is c=
onfigured.<BR>&gt; After lunching ethereal, we see the TCP/IP packets onl=
y, no FC <BR>&gt; packets.<BR><BR>So is the Ethernet port of the MDS 9000=
 Port Analyzer Adapter:<BR><BR>directly plugged into an Ethernet port on =
the machine running Ethereal?<BR><BR>plugged into a hub into which an Eth=
ernet port on the machine running <BR>Ethereal is also plugged?<BR><BR>pl=
ugged into a switch into which an Ethernet port on the machine <BR>runnin=
g Ethereal is also plugged?<BR><BR>NOTE: not everything called a "hub" is=
 a hub; some are switches. See<BR><BR>http://wiki.wireshark.org/HubRefere=
nce<BR><BR><BR>&gt; Click the Filter, not even find FC as an option.<BR><=
BR>That's for display filters, which
 don't affect what traffic you capture.<BR><BR>A *display* filter for Fib=
re Channel traffic would be "fc", not "FC".<BR><BR>A *capture* filter for=
 it would either be<BR><BR>ether proto 0xfcfc<BR><BR>or<BR><BR>ether prot=
o 0<BR><BR>assuming that the encapsulation dissected by the "MDS Header" =
<BR>dissector is the one used by the Port Analyzer Adapter.<BR>__________=
_____________________________________<BR>Ethereal-users mailing list<BR>E=
[email protected]<BR>http://www.ethereal.com/mailman/listinfo/et=
hereal-users<BR></BLOCKQUOTE><BR>
--0-626675720-1160429198=:79072--

--===============0242054661==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Ethereal-users mailing list
[email protected]
http://www.ethereal.com/mailman/listinfo/ethereal-users

--===============0242054661==--