Re: [Ethereal-users] newbie question

[Guy Harris <guy@xxxxxxxxxx>]

> I read the recent traffic concerning the treatment of encapsulated IP by
> ethereal.  I haven't seen anything in the documentation so I was wondering
> if someone could tell me just exactly what ethereal would do with an
> encapsulated traffic between a cisco and another router.
>  
> While capturing or when viewing a capture file, does ethereal display only
> the stats on the encapsulated traffic between the two routers?  Or does it
> show stats for the traffic and nodes that are encapulated?

If the release of Ethereal you're using understands the particular form
of encapsulation being used, it'll display statistics for the traffic
that's encapsulated when viewing a capture file - however, it won't
necessarily do so when capturing (the code that updates the packet count
window doesn't spend as much time dissecting traffic as the code that
displays traffic, as a detailed dissection consumes CPU time that may be
required just to handle saving the incoming traffic).