Ethereal-users: Re: [Ethereal-users] NT4 reads tr packets as ethernet II

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Gilbert Ramirez <gilramir@xxxxxxxxx>
Date: Thu, 29 Mar 2001 10:14:29 -0600
"Ph. Marek" wrote:
> 
> >
> >If you have ever gotten Ethereal to capture packets on Windows, the
> >machine on which you ran Ethereal has WinPcap installed.
> But thats only the library!
> I need some kind of executable to capture packets, don't I?
> 
> >       3) do all your capturing with WinPcap (which supports capture
> >          filters - using the same syntax as Ethereal) - remember to
> >          specify "-w" to save the capture to a file, and to specify "-s
> >          65535" if you want more than the small 68 byte captures that
> 
> So how should I do that?

Guy meant to say "WinDump". It's at
http://netgroup-serv.polito.it/windump/

WinDump is to tcpdump as WinPcap is to libpcap.

--gilbert