Wireshark · Ethereal-users: Re: RE: [Ethereal-users] Ethereal -- nothing happens

[<martin.regner@xxxxxxxxx>]

Hi Jin,

On my Win2K laptop I use NdisWanBh to capture on PPP links.

In order to get NdisWanBh you have to do some steps on Windows 2000:
http://winpcap.polito.it/misc/dialup.htm

I can't guarantee that it works for you.

http://www.ethereal.com/lists/ethereal-users/200212/msg00046.html


> 
> Från: Richard Urwin <RUrwin@xxxxxxxxxxxxxx>
> Datum: 2003/01/16 Thu AM 11:43:04 CET
> Till: 'Jin Ho Tan' <tanjinho@xxxxxxxxx>,  ethereal-users@xxxxxxxxxxxx
> Ämne: RE: [Ethereal-users] Ethereal -- nothing happens
> 
> http://www.ethereal.com/faq.html#q5.12
> 
> Q 5.12: I'm running Ethereal on Windows NT/2000/XP/Server; my machine
> has a PPP (dial-up POTS, ISDN, etc.) interface, and it shows up in the
> "Interface" item in the "Capture Options" dialog box. Why can no packets
> be sent on or received from that network while I'm trying to capture
> traffic on that interface? 
> A: WinPcap doesn't support PPP WAN interfaces on Windows
> NT/2000/XP/Server; one symptom that may be seen is that attempts to
> capture in promiscuous mode on the interface cause the interface to be
> incapable of sending or receiving packets. You can disable promiscuous
> mode using the -p command-line flag or the item in the "Capture
> Preferences" dialog box, but this may mean that outgoing packets, or
> incoming packets, won't be seen in the capture
> 
> Your options are:
> Capture the data elsewhere. On the server for example (assuming that
> that is not also a WAN interface)
> Insert a router (eg another W2K machine) between the VAIO and the WAN
> link so your laptop uses an LAN interface.
> 
> -- 
> Richard Urwin, Software Design Engineer 
> Schenck Test Automation 
> Braemar Court, 1311b Melton Road, Syston, UK. 
> rurwin@xxxxxxxxxxxxx 
> 
> 
> -----Original Message-----
> From: Jin Ho Tan [mailto:tanjinho@xxxxxxxxx]
> Sent: 16 January 2003 10:27
> To: ethereal-users@xxxxxxxxxxxx
> Subject: [Ethereal-users] Ethereal -- nothing happens
> 
> 
> Hi all,
> 
> I installed Ethereal 0.9.8.c (and winpcap 2.3) to capture HTTP traffic
> from my win2k laptop to a development server. However, when I started to
> capture from the interface (e.g., \Device\Packet_NdisWanlp), nothing is
> captured at all. All the statistics showed 0%.
> 
> I've tried to turn off all name resolution, promiscuous mode, different
> interfaces (\Device\Packet_NdisWanIpMbfOut...), rebooting, ... to no
> avail. I have also downloaded windump which gives the same problem. It
> seems that my winpcap is not working but there's no admin program for me
> to tweak. What gives ? 
> 
> Thanks in advance for any help.
> 
> Regards,
> Jin-Ho
> 
> P.S. I'm using  Sony VAIO laptop if it makes any difference
> 
> 
> 
> 
> 
> Do you Yahoo!?
> Yahoo! Mail Plus - Powerful. Affordable. Sign up now 
> ________________________________________________________________________
> This email has been scanned for all viruses by the MessageLabs SkyScan
> service. For more information on a proactive anti-virus service working
> around the clock, around the globe, visit http://www.messagelabs.com
> ________________________________________________________________________
> 
> ________________________________________________________________________
> This email has been scanned for all viruses by the MessageLabs SkyScan
> service. For more information on a proactive anti-virus service working
> around the clock, around the globe, visit http://www.messagelabs.com
> ________________________________________________________________________
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>