Ethereal-users: Re: [Ethereal-users] Ethereal problem

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Sat, 17 Jan 2004 20:17:48 -0800
On Sat, Jan 17, 2004 at 07:13:28PM +0100, El Half wrote:
> Well this shouldn't be a problem as I try to use it on Windows 98.

Actually, with WinPcap 3.0, it would be a problem even on Windows 98;
WinPcap 3.0 doesn't allow capturing on PPP interfaces, as there are
problems even on Windows 95/98/Me:

	http://winpcap.polito.it/misc/changelog.htm

"due to the large number of messages reporting problems (blue screens)
with VPNs, PPTP and such connections, we have disabled the support for
NdisWan adapters. As a consequence, it is not possible to capture from
PPP (neither NdisWanIp, nor NdisWanBh, nor NdisWanBfIn/Out...). At the
moment we have no plans to fix the problem with VPNs, PPTP, PPP unless
we get a generous sponsorship."

I've updated the code so that it'll note that in the dialog box (and the
equivalent tethereal message).

> And also it's not a PPP interface I'm trying to sniff on (wireless
> lan).

That note in the dialog box is a note, not a firm indication that the
*only* reason why you wouldn't be able to open a device would be that
it's a PPP device.

> I find this strange as I succesfully can sniff traffic using Windump or 
> thetereal.

So what output do you get from the commands:

	windump -D

	tethereal -D