Ethereal-users: Re: [Ethereal-users] Outgoing packets are not shown

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Mon, 4 Aug 2003 10:11:58 -0700
On Mon, Aug 04, 2003 at 06:48:14AM -0400, James R. Hendrick wrote:
> I have seen this with VPN software installed. If this is the case, try
> going to the Network Connections and disabling (not removing) the VPN
> software, re-start ethereal and see if this helps the situation.

There's already a FAQ item on that problem on Windows (he's using
Windows).

However, his problem was, I suspect, that the driver for his WLAN
interface doesn't, for an NDIS attachment in promiscuous mode, supply
outgoing packets; he tried capturing with promiscuous mode turned off
and he saw outgoing packets.

This is probably due to the NDIS spec specifically saying that one form
of NDIS attachment (NDIS_PACKET_TYPE_ALL_LOCAL) causes outgoing packets
to be delivered, but not specifically saying that the promiscuous-mode
attachment (NDIS_PACKET_TYPE_PROMISCUOUS) does so - some network device
driver writers decided that it should do so (I suspect most Ethernet
device driver writers did), but some WLAN driver writers appear not to
have so decided.

I've updated the FAQ item to describe both problems.