Hi,
I went to the mirror site, and did as you suggested:
- Removed Windows\packet.dll
- Uninstalled WinPcap from control panel
- rebooted
- Downloaded WinPcap 2.2 from mirror site.
- Installed
- Tried running ethereal
I get the exact same error, unfortunately. I've double-checked, and there
is no Windows\Packet.dll any more. I still get "Unable to load WinPcap
(wpcap.dll). Capturing not enabled."
I checked the Windows/System folder, and I do see Packet.dll and Wpcap.dll,
and their modify dates are current. What else can I check? I also downloaded
the latest windump, and when I try to run it from the DOS prompt it dies with an
"Illegal Instruction". All the "detail" screen shows is that it died at 0FE9:0192.
Thanks,
Bob
Guy Harris wrote:
> > I'm running WIN98, and I installed winpcap v2.1 Beta.
>
> The current non-beta version of WinPcap is 2.2; WinPcap 2.1 beta is out
> of date.
>
> You should uninstall WinPcap 2.1, *and* make sure that there is no
> "Windows\Packet.dll" file, as per an entry in the WinPcap FAQ:
>
> http://www.wiretapped.net/security/packet-capture/winpcap/misc/faq.htm
>
> (the main site is down, so I'm using the mirror site); that entry says:
>
> Q-2: How can I see if WinPcap is installed on my system? How can
> I remove it?
>
> A: WinPcap 2.1 or newer: go to the control-panel, then open the
> "add/remove programs" applet. If WinPcap is present in your
> system, an entry called "WinPcap" will be present. Double-click
> on it to uninstall WinPcap.
> WinPcap 2.02 or older: go to the control-panel, then open the
> "Network" applet. If WinPcap is present in your system, an entry
> called "Packet Capture Driver" will be listed (in Windows NT you
> have to choose the "Services" tab). Select it and press
> "Remove" to uninstall WinPcap.
>
> To be absolutely sure that WinPcap has been installed, please
> look at your system folder: you should find files called
> packet.* and wpcap.dll. Please check the file dates: these
> should be compatible with the WinPcap release dates.
>
> IMPORTANT NOTE: sometimes, when uninstalling WinPcap version
> 2.02 or older from the control panel's network applet in Windows
> 9x, the file Windows\Packet.dll is not deleted. You must delete
> this file manually, otherwise version 2.1 will not work properly
> and could cause system crashes.
>
> Once you have uninstalled it, *AND* deleted "C:\Windows\Packet.dll" if
> it's present after uninstalling WinPcap, download and install WinPcap
> 2.2:
>
> http://www.wiretapped.net/security/packet-capture/winpcap/install/default.htm