Ethereal-users: Re: [Ethereal-users] Tracing PPP on Windows 2K

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Wed, 10 Jul 2002 11:50:09 -0700
On Wed, Jul 10, 2002 at 07:24:53AM -0700, Stuart Burgess wrote:
> I'm running Windows 2000 and per "FAQ 5.11", I'm having a problem tracing a
> Web session over PPP, i.e. I can see the interface (with TCPdump, the
> capture seems to see packets across the line)

tcpdump, or WinDump?  (I.e., when you see packets, are you running
Windows or some flavor of UNIX?)

> but I cannot seem to capture
> and complete the HTTP dialogue. My session timeout, server failure in the
> TCP packages captured .. as if Ethereal is monopilizing the dialogue. On the
> Ethernet side, this is fine, it's the PPP dialogue I can't get working. 

So what happens if you run WinDump, with flags "-s 65535" and "-w file.cap"
(to cause WinDump to write the capture to a file "file.cap")?

Do you see the same problems while the capture is in progress?

What happens if you then read "file.cap" with Ethereal?  Does the
capture show the problems?