Ethereal-users: Re: [Ethereal-users] Ethereal not work in PPP link in win2k pro

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Fri, 2 May 2003 10:50:16 -0700
On Sat, May 03, 2003 at 12:01:34AM +0800, victor.lee@xxxxxxxxx wrote:
> I would like to confirm if ethereal with winpcap 2.3 really works in
> PPP link (for example, dial-up link) under win2k professional.

Unfortunately, we *can't* confirm it.

That's because we can *deny* it:

	http://winpcap.polito.it/misc/faq.htm#Q-6

"Q-6: Can I use WinPcap on a PPP connection?

A: We have tested WinPcap on PPP connections under Windows 95, Windows
98 and Windows ME.  In Windows 95, due to a bug in NDIS, WinPcap
sometimes resets the PPP connection.  In Windows 98/ME this bug appears
to be corrected, and WinPcap seems to receive correctly, however it is
not able to send packets.  Under Windows NT/2000/XP there are problems
			   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
with the binding process, that prevent a protocol driver from working
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
properly on the WAN adapter.  The problem is caused by the PPP driver of
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
WinNTx, ndiswan, that doesn't provide a standard interface to capture."
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

WinPcap 3.0 simply refuses to support the NDISWAN interfaces at all - it
doesn't even try:

	http://winpcap.polito.it/misc/changelog.htm

"NdisWan support: 
   o due to the large number of messages reporting problems (blue
     screens) with VPNs, PPTP and such connections, we have disabled the
     support for NdisWan adapters.  As a consequence, it is not possible
     to capture from PPP (neither NdisWanIp, nor NdisWanBh, nor
     NdisWanBfIn/Out...).  At the moment we have no plans to fix the
     problem with VPNs, PPTP, PPP unless we get a generous sponsorship."