Ethereal-users: Re: [Ethereal-users] Monitoring RS-232/PPP/IP

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Fri, 2 Mar 2001 17:29:10 -0800 (PST)
> Knows anyone a way to monitor the RS-232/V.24 interface with a PPP/IP connection
> of a WindowsNT PC by means of ethereal?

Unfortunately, the WinPcap port of libpcap to Windows doesn't support
PPP interfaces on Windows NT/2K:

	http://netgroup-serv.polito.it/winpcap/misc/faq.htm

"Q-2: Can I use the packet driver on a PPP connection?

A: We have tested the packet driver on PPP connections under Windows 95
and Windows 98 and it seems to work well.  Under Windows NT and Windows
2000 there are problems with the binding process, that prevents a
protocol driver from working on the WAN adapter if it is not written by
Microsoft."

See also FAQ 3.9 in the Ethereal FAQ:

	http://www.ethereal.com/faq.html#q3.9

"Q 3.9: I'm running Ethereal on Windows; my (Token Ring, PPP) network
interface doesn't show up in the list of interfaces in the "Interface"
item in the "Capture Preferences" dialog box popped up by the
"Capture->Start" menu item.

A: The WinPcap driver and library that Ethereal uses for packet capture
don't support Token Ring interfaces, and doesn't support PPP WAN
interfaces on Windows NT/2000, so Ethereal cannot capture packets on
those devices.

For problems seen when installing the WinPcap driver or library, or seen
when capturing, check the WinPcap FAQ to see if your problem is
mentioned there."