Ethereal-users: Re: [Ethereal-users] about use of Ethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Sat, 22 May 2004 01:11:06 -0700
On Fri, May 21, 2004 at 08:27:27PM +0000, zaheer ahmed wrote (in HTML -
some mail readers used by people on this list don't make it easy to read
HTML mail, so text mail is preferred):

>  i want to capture packets on dial up modem, i have installed winpcap
> 3.01-alpha and network monitor.  now what should i do

You should un-install WinPcap 3.01-alpha and install WinPcap 3.1 beta. 
Earlier versions of WinPcap don't support capturing on PPP interfaces
(such as dial-up modems) very well.

> 1. is it necessary to install Ethereal,

No - you can also use WinDump:

	http://windump.polito.it/

(a command-line tool - it's tcpdump, ported to Windows by the people who
did WinPcap), or Analyzer:

	http://analyzer.polito.it/

(a GUI-based network analyzer, also from the people who did WinPcap), or
Packetyzer:

	http://www.networkchemistry.com/products/packetyzer/

(a Windows GUI-based analyzer whose packet analysis code is that of
Ethereal).

Also, if you've installed Network Monitor, that might also let you
capture traffic (it doesn't use WinPcap).

> if yes then how and from where can i download.

See the links above for the other tools; for Ethereal see

	http://www.ethereal.com/distribution/win32/

for the Windows version.

> 2. if without Ethereal i can capture and sniff packets on dial up
> modem then how can i?

See above for some other tools that also work with WinPcap.