[Guy Harris <gharris@xxxxxxxxxxxx>]

On Thu, Dec 07, 2000 at 04:17:09PM -0000, Graham Bloice wrote:
> There should be an interface listed in the droplist.  If you don't have
> anything listed, you may not have installed WinPCap.  See the link on
> http://www.ethereal.com/distribution/win32/.

If he hasn't installed WinPcap, the version of Ethereal that can do
packet captures probably wouldn't even run, as there probably wouldn't
be a "packet.dll" shared library.  However...

> Install WinPCap exactly as stated in their instructions.

...if you haven't followed all the instructions, *including* the last
part of step 6 in the NT instructions:

	6.  Choosing the service tab you will see a line containing the
	string: "BPF Network Packet Driver vX.XX". 

	Press on the Close button and *reboot the machine*.

you won't be able to capture packets - you *have* to reboot the machine
after installing WinPcap.

(The string in that set of instructions may be out of date; if I
remember correctly, the current version has a different name, without
"BPF" in it.)