[Richard Urwin <richard@xxxxxxxxxxxxxxx>]

On Friday 02 May 2003 5:01 pm, victor.lee@xxxxxxxxx wrote:
> Hi,
>
> I would like to confirm if ethereal with winpcap 2.3 really works in PPP
> link (for example, dial-up link) under win2k professional. I found when I
> start the ethereal to capture the packets in the WAN PPP link, the capture
> didn't successful and in addition I could not even launch any suceesful
> applications through the WAN link (with the ethereal still in open)

http://www.ethereal.com/faq.html#q5.16


Q 5.16: I'm running Ethereal on Windows NT/2000/XP/Server; my machine has a 
PPP (dial-up POTS, ISDN, etc.) interface, and it shows up in the "Interface" 
item in the "Capture Options" dialog box. Why can no packets be sent on or 
received from that network while I'm trying to capture traffic on that 
interface?

A: WinPcap doesn't support PPP WAN interfaces on Windows NT/2000/XP/Server; 
one symptom that may be seen is that attempts to capture in promiscuous mode 
on the interface cause the interface to be incapable of sending or receiving 
packets. You can disable promiscuous mode using the -p command-line flag or 
the item in the "Capture Preferences" dialog box, but this may mean that 
outgoing packets, or incoming packets, won't be seen in the capture. 
> (However, the WAN PPP link is working fine when no ethereal is being
> launched!!)

-- 
Richard Urwin