. . . but who is the ETHTOOLS aimed at? I run a very small network at home (often as little as 5 machines at a time) and use the standard star topology. It's a mixture of routers and switches, just like any other modern network. I can't imagine how I would practically set up a bus topology . . .
Well, it depends.
First, "bus topology" refers to the logical organisation of the network, which is not necessarily identical to what you can see when looking at the cables. A moderately old 10BaseT ethernet, centered around a hub, for instance, looks like a star topology but it actually behaves like a bus topology. The essential point is, whether one node can "see" all others and listen to all data traffic or whether some instance, like e.g. a switch, isolates it from foreign data traffic.
As the various programs of the ETHTOOLS package can only analyze data they are able to "see", they might be of limited use in a perfectly isoltated environment, while on a bus they can do their job. But this difficulty is not specific to my programs, every network analyzer will face this problem.
So why don't you just try it? If you have a packet driver installed anyway, all you have to do, is start the programs and see what happens. If they don't see any data traffic, which they would tell you, then you are in bad luck, but you didn't loose much as well. If they show results, then it is up to you, whether they give you valuable hints or perhaps you are just curious about what is going on in yout network.
As we all know, DOS is not capable of multitasking. Therefore you cannot run an analizing tool
and a network application on the same machine at the same time. But hooking a (cheap) second computer to the same cable, to listen what the others "talk about" is possible. Perhaps it might help inserting a hub between the repective node, the "surveilling computer" and the uplink. Just as a suggestion . . .
By the way . . . while testing the tools, i found a nasty bug in my own small network at home. I accidentilly misconfigured the netmask of one of the nodes in such a tricky way, that it did not completely prevent the respective machine form accessing the net, just the shared drives did not show up correctly on the other mashines. Such an effect doesn't lead you to the suspicion that TCP/IP couldn't be set-up correctly, as ping and all the other standard tools worked fine. Only when inspecting the results of ETHWHAT and trying to understand what was going on, i got the decicive hint, to take a closer look at the netmask.