Ethereal-users: Re: [Ethereal-users] 802.1Q can capture ?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Mon, 11 Mar 2002 00:49:52 -0800
On Mon, Mar 11, 2002 at 01:11:47PM +0900, Kusunoki Kaoru wrote:
> windump was tried on windows XP. 
> Too, 802.1Q has not been captured. 
> Do I hear that saying [ of the possibility of
> the problem of pcap ] is high too?

Because both Ethereal and WinDump are having the same problem, it's
probably either a problem with WinPcap, or a problem with the Windows
networking code (the Windows networking code code might, for example,
not allow an NDIS driver, such as the WinPcap driver, to connect to the
raw Ethernet interface to capture raw Ethernet packets, and may only
allow the WinPcap driver to connect to the "virtual" interface, so that
it sees only packets with the VLAN stuff removed).