On Sun, Jun 29, 2003 at 05:39:56AM -0400, Moshe Haviv wrote:
> I have recently installed WinPCAP3.0 and etherial vers 9.1.3a. My
> laptop had �Service pack 2 installed before the installation.
> The installation seems to capture packets OK in one of my NICs(The
> built in one , Intel pro 10/100)
>
> 1- What will happen when I install Service Pack 4 for Windows 2000?
> Any problems expected? Or do I have to reinstall WinCap and Etherial
> after the Service pack installation + reset?
I see no reason why you'd have to reinstall Ethereal after upgrading to
SP4. I suppose it's possible that you *might* have to reinstall
WinPcap after upgrading, but I wouldn't expect that you'd have to do so.
> 2-My second NIC is a Xircom 10/100 . It seems that installation chose
> the Built in Intel NIC as default. The question is how can I change
> that and make Ethereal capture from this NIC?
You don't have to change the default in order to capture on the other
interface, as long as WinPcap recognizes that interface, so I'll treat
"how can I make Ethereal capture from this NIC?" and the presumed "how
can I change the default?" question separately.
For the first question:
If WinPcap recognizes the interface, it should show up in the drop-down
list for the "Interface:" field in the "Capture Options" dialog box
popped up by the "Start" item in the "Capture" menu. Select that item,
and try capturing on it.
For the second question:
If you select "Preferences" from the "Edit" menu, and then select
"Capture" from the list of preference items on the left, it should have
an "Interface:" field with a drop-down list; select the interface you
want to be the default from that list, click "Save", and click "OK".
> 3- Can I also configure to capture from the modem port?
Ethereal only captures from network interfaces; it doesn't support
capturing from a raw modem port. It can, on some OSes, capture on PPP
links on serial ports; however, at least with WinPcap 3.0, Windows is
not one of those OSes:
http://winpcap.polito.it/misc/faq.htm#Q-6
It operates unreliably in earlier versions of WinPcap, and might crash
the system. They completely disabled it in WinPcap 3.0.
> I do not wish to make the changes above permanent but to make the
> Etherial keep the last configuration and make it possible to change it.
Ethereal doesn't default to the last interface on which you captured -
it defaults to the interface configured to be the default.
If you have more than one network interface on which Ethereal can
capture, you don't have to capture from the default interface.