[Ethereal-users] doubts on ethereal and ppp0 interface

[kavita@xxxxxxxxxxxxx]

Hi thr,

  I have few doubts regarding ethereal tool and ppp0 interface which are
listed below.

1. On ppp0 interface, which traffic Ethereal listens. Whether it listens
traffic between data card/modem and socket or between modem and kernel or
traffic going  or coming to data card.
   In my reading I found that ppp0 link gets established between computer
and data card/modem.

2. On ppp0 interface if we send ICMP packet of size greater than 7300
bytes from sender machine and if 100 packets of 7300 bytes are sent
through ping program , 7300 bytes are splitted into 5 fragments. Now in
Ethereal log on sender m/c I found that for the packet if all 5 fragments
of it are not sent then Ethereal has logged all the fragments till all the
fragments of that packet are sent successfully. Who is sending repeated
fragments till all the fragments are successfully sent and Ethereal is
logging all the fragments. According to ping statistics it shows only 100
packets transmitted. So it may be either kernel or socket is retrying to
send fragments till all fragments are successfully sent. Then the question
comes. Which traffic Ethereal listens?

If anyone has answer to above questions please reply back.

Thanks and Regards,
Kavita