Ethereal-users: Re: [Ethereal-users] 0.10.1 GUI not capturing on win98SE

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date: Mon, 23 Feb 2004 17:37:21 -0000
>Subject: Re: [Ethereal-users] 0.10.1 GUI not capturing on win98SE 
>From: Guy Harris <gharris@xxxxxxxxx> 
>Date: Sun, 22 Feb 2004 15:04:50 -0800 

>--------------------------------------------------------------------------------

>On Sun, Feb 22, 2004 at 12:12:21AM -0000, Mel wrote:
> 
> >I'm not able to capture through the GUI on 0.10.1.  The "Capture Options"
> >dialog appears, but when I click "OK" the capture window doesn't appear and
> >no packet information appears in the main window.  There are no messages in
> >the terminal.  
> 
>> Same problem here 

>I.e., the capture window doesn't appear at all?

>From the main menu Capture->Start gives the "Ethereal: Capture Options" 
window as nornal, from here if "Update list of Packets in real time" is selected
the Ethereal: Capture" window does not appear at all,
BUT if I clear that option before clicking "OK", I then got an error message, 
but still no capture window and hence no capture.

Error as follows -
"The capture session could not be initiated (Error opening adapter:The system cannot find the file specified ).
Please check that you have the proper interface specified...."

Notably "Link-layer header type:" option is blank and disabled in the 
"Capture Options" window. (normally reads Ethernet)


>> I'm also using Windows 98SE & WinPcap 3.0 and I can't capture anything.
>> 
> >Tried Dial-up and Lan adapter  - both work fine using 0.10.0.

>The dial-up adapter works with WinPcap 3.0?  That's somewhat surprising,
>as 3.0 explicitly removed support for PPP links.


Yes on Windows 98SE  with WinPcap_3_0.exe and Ethereal 0.10.0
capturing Dial-up (PPP) works perfectly - (I use an internal winmodem - 
Diamond supraSST pro DF). (I did have some minor problems when 
using Sygate firewall - no problems with ZA or Kerio 2.1)

(Since I last formatted & installed Windows 98SE I've only ever had 
WinPcap 3.0 installed - I've also just downloaded winpcap_3_0.exe
from the link supplied on ethereal's download page & did a FC /b 
against my previous install file to confirm it is identical)
 

I read PPP support was removed from WinPcap 3 because of 
problems with the way XP & 2000 worked, but I tried it anyway
because it didn't mention 98SE and was pleasantly surprised-
It seems it hasn't been removed for 98SE!! - I might add that it 
fixed a problem with the packet times which used to be incorrect
using WinPcap 2.3.


>So if you have WinPcap 3.0 installed, and *leave* it installed,
>un-install Ethereal 0.10.1, install Ethereal 0.10.0, and run it without
>"Update list of packets in real time", it can capture on your LAN
>adapter, but if you then un-install Ethereal 0.10.0 (and leave WinPcap
>3.0 alone), install Ethereal 0.10.1, and run it without "Update list of
>packets in real time", it gives an error when you try to capture on your
>LAN adapter?

When I uninstalled 0.10.1, and  installed 0.10.0, I didn't bother to 
uninstall WinPcap 3.0 and yes I could capture on both LAN
and PPP.

Ethereal 0.10.1 wouldn't capture at all, but it only gives
an error if I deselect "update packets in real time".
With it selected, clicking OK just makes the "Capture Options"
Window disappear and nothing more.



Hope that helps

Regards

M J sage.