Wireshark · Ethereal-users: Re: [Ethereal-users] Query

[Saurabh Bhasin <sbhasin@xxxxxxxxx>]

On 7/27/05, Babur Khan <bc201078@xxxxxxxxxxxxxxxx> wrote:
[snip]
> Is Ethereal works Network Layer and capture at other layers so that my packet
> Captured before Data Link layer and where it receives, it captured at network
> layer after decryption at Data Link Layer.
> Am i Correct?
> Or is there any other issue?
> Can you tell me please any other sniffer that works at data link layer?

A Protocol analyzer or a packet capture software does not work at a
certain layer. Ethereal captures packets/frames that contain
information related to all layers (starting from layer 2 and going all
the way up to layer 7).