Ethereal-users: Re: [Ethereal-users] ICMP echo request not showing in capture?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Wed, 13 Nov 2002 00:13:06 -0800
On Wed, Nov 13, 2002 at 10:04:46AM +0200, sami.hanninen@xxxxxxxxxxxxxxx wrote:
> > On what OS are you doing this?
> 
> Windows 2000 with winpcap's newest version. I also have other software which
> also bind to network adapter: Checkpoint Securemote, VMWare bridge protocol
> and MS network monitor driver.
> 
> > On some OSes, packets sent by the machine running a capture 
> > program won't be seen by the capture mechanism provided by the OS.
> 
> Ouch - quick quess would be that MS is doing just that with W2K.

I wouldn't guess that, given that WinPcap-based programs (such as
Ethereal) can see outgoing packets on my machine at work, running W2K. 

I'll bet that one or more of those other pieces of software is causing
the problem; it's probably not the network monitor driver, as my machine
at work has that installed.  It's probably one of the other pieces of
software.

Do you have Network Monitor installed (not just the driver)?  Can it see
outgoing packets?

You should probably try this with WinDump:

	http://windump.polito.it/

and if it also doesn't see all the outgoing packets, you should try
reporting this to the WinPcap developers, using the "Reporting bugs"
instructions (including running the debugging version of packet.dll):

	http://winpcap.polito.it/contact.htm