Ethereal-users: RE: [Ethereal-users] Ethereal doesn't capture outgoing communicat ion

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Richard Urwin <RUrwin@xxxxxxxxxxxxxx>
Date: Mon, 24 Feb 2003 12:27:56 -0000
I am using Ethereal on Windows 2000 Workstation, with an Intel PRO100S
NIC. It works OK.

Ethereal 0.9.7 (with GTK+ 1.3.0, GLib 1.3.2, libz 1.1.4 all probably
unimportant,) no UCD SNMP
WinPCap 2.3
Windows 2000 Workstation fully patched.
Intel PRO100S NIC using Intel driver version 6.1.3.0 dated 25/02/2002

--
Richard Urwin, Private
"No 9000 series computer has ever made a mitsake or corrubiteddatatato."



> -----Original Message-----
> From: Ruth Wasserman [mailto:rutiw@xxxxxxxxxxxxx]
> Sent: 24 February 2003 12:18
> To: 'Guy Harris'
> Cc: 'ethereal-users@xxxxxxxxxxxx'
> Subject: RE: [Ethereal-users] Ethereal doesn't capture outgoing
> communicat ion
> 
> 
> Thanks for the reply.
> I tried both with promiscuous mode and without, still no change.
> 
> The OS is Win2000 server, the network card is Intel(R) PRO/100 VE
> 
> Is there a flag as you mentioned in the OS that I need to set?
> Thanks,
> Ruth
> 
> -----Original Message-----
> From: Guy Harris [mailto:gharris@xxxxxxxxx] 
> Sent: Sunday, February 23, 2003 10:44 PM
> To: Ruth Wasserman
> Cc: 'ethereal-users@xxxxxxxxxxxx'
> Subject: Re: [Ethereal-users] Ethereal doesn't capture outgoing
> communication
> 
> On Sun, Feb 23, 2003 at 03:17:31PM +0200, Ruth Wasserman wrote:
> > I installed Ethereal and for some reason when I run the 
> capture it doesn't
> > record the outgoing communication, only the ingoing.
> 
> On what operating system is this?
> 
> Are you capturing in promiscuous mode?
> 
> Ethereal doesn't include its own code to do packet capturing; 
> it relies
> on the libpcap/WinPcap library for that.  libpcap doesn't include code
> to do packet capturing, either; it relies on the underlying UNIX's raw
> packet capture mechanism.  WinPcap includes drivers to do that, but it
> still depends on the Windows network card drivers and NDIS framework.
> 
> Thus, the behavior of packet capture depends on the OS you're 
> using.  On
> some OSes (such as Solaris), unless you capture in 
> promiscuous mode you
> won't see outgoing packets.  On some other OSes (such as HP-UX), you
> might have to set a special flag in the OS to see outgoing packets.
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
> 
> ______________________________________________________________
> __________
> This email has been scanned for all viruses by the MessageLabs SkyScan
> service. For more information on a proactive anti-virus 
> service working
> around the clock, around the globe, visit http://www.messagelabs.com
> ______________________________________________________________
> __________
> 

________________________________________________________________________
This email has been scanned for all viruses by the MessageLabs SkyScan
service. For more information on a proactive anti-virus service working
around the clock, around the globe, visit http://www.messagelabs.com
________________________________________________________________________