Ethereal-users: Re: [Ethereal-users] NT4 reads tr packets as ethernet II

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Ph. Marek" <marek@xxxxxxxxxxxxxxx>
Date: Thu, 29 Mar 2001 13:28:09 +0200
>Another possibility would be to compile 0.8.16 after changing the
>top-level Makefile.nmake file to refer to "wpcap.lib" rather than
>"libpcap.lib" (the name changed between WinPcap 2.02 and WinPcap 2.1).
Thanks, but I don't think I'll take the time to do that.

>> where can I get winpcap?
>
>The same place you've always gotten it:
>
>	http://netgroup-serv.polito.it/winpcap/
>
>If you have ever gotten Ethereal to capture packets on Windows, the
>machine on which you ran Ethereal has WinPcap installed.
But thats only the library!
I need some kind of executable to capture packets, don't I?

>	3) do all your capturing with WinPcap (which supports capture
>	   filters - using the same syntax as Ethereal) - remember to
>	   specify "-w" to save the capture to a file, and to specify "-s
>	   65535" if you want more than the small 68 byte captures that

So how should I do that?

Thanks all the same!

Regards,

Phil