Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: Re: [Ethereal-users] help

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Chris Waters" <chris@xxxxxxxxxxxx>
Date: Tue, 27 Aug 2002 09:25:35 -0700
Hi,
 
If you are using Ethereal to capture packets with pcap on Unix or winpcap on Windows then you will be capturing packets at the Ethernet MAC level. i.e. the lowest level that you will capture will be the Ethernet header.
 
Regards,
 
Chris.
----- Original Message -----
Sent: Tuesday, August 27, 2002 4:33 AM
Subject: [Ethereal-users] help

 
Dear Sir or Madame,
 
I used Ethereal on a small 802.11a network to capture packets.
My question is on which OSI layer the packets is captured (i.e. physical, mac, LLC or network)?
 
kind regards,
 
Marcus Bengtsson