Wireshark · Ethereal-dev: Re: [Ethereal-dev] about ethereal

[Guy Harris <guy@xxxxxxxxxxxx>]

On Friday, June 20, 2003, at 12:23AM, RABRET Laurent FTRD/DAC/ISS wrote:

> Or, as I suggested it about one month ago (with a very first example), 
> we can use the Microsoft Network Monitor driver instead. I proposed to 
> include the pcap<->NM adapter to the Ethereal distribution for 
> Windows.

That's not Ethereal-specific - it should probably be part of libpcap 
itself, or in a forked copy of libpcap.  (libpcap's pcap-win32.c could, 
for example, try to load packet.dll; if that succeeds, it'd use the 
WinPcap code, otherwise it'd try the NM code.  If the NM code requires 
a Network Monitor DLL, it should try to load that and, if that fails, 
act like the code in pcap-null.c)

Note that this would, of course, require that all the APIs be 
implemented, including "pcap_findalldevs()"; Ethereal doesn't currently 
use it, but it will eventually do so on platforms where it's available, 
and WinPcap currently provides it.)