Ethereal-users: Re: [Ethereal-users] Outgoing packets not captured. ( no VPN, Token Ring Interfa

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Wed, 2 Jul 2003 13:09:43 -0700

On Wednesday, July 2, 2003, at 10:31 AM, Lyon, Kristopher wrote:

I'm attempting to sniff traffic from a token ring interface on my machine, however I am unable to see traffic originating from my machine. I am able
to capture incoming traffic in both standard and promiscuous mode, but
nothing outgoing from the interface.

I don't know how NDIS handles outgoing packets, so I don't know whether an NDIS driver has to do something special to ensure that outgoing packets are seen by code that taps into NDIS - such as WinPcap.

This question is probably best asked of the WinPcap developers, as it's extremely unlikely to have anything to do with Ethereal or what particular version of Ethereal you're using.

Try downloading WinDump:

	http://windump.polito.it/

and try capturing with it, and see if it has the same problem (which I strongly suspect it will).

If so, it is, in fact, a WinPcap problem; see

	http://winpcap.polito.it/contact.htm

for information on how to report WinPcap problems.