Ethereal-users: Re: [Ethereal-users] capturing a serial connection

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Guy Harris" <gharris@xxxxxxxxx>
Date: Wed, 1 Sep 2004 11:39:51 -0700 (PDT)
Jeffrey Ross said:
> I'm looking to be able to on Windows XP capture the traffic on a dialup
> PPP and/or slip session.
>
> so far I have not been successful with ethereal, will it do this type of
> capture?

It will do so, on Windows, if, and only if, WinPcap supports doing so.

WinPcap, up to version 3.0, does *NOT* support doing so.

Recent beta versions of WinPcap 3.1 will - but they're betas, so there
might be more bugs in the current beta version than in 3.0.  (In fact, on
the winpcap-users mailing list, one of the WinPcap developers said that
the final release of WinPcap 3.1 has been delayed "due to some problems
with NdisWan capture", and NdisWan refers to the mechanism used to handle,
among other things, PPP links on Windows, so some of those bugs might
affect its ability to capture, for example, dialup PPP traffic.)

> if not, any suggestions on an application that will?

Any application using WinPcap will have the same problems that Ethereal
would with PPP links.  There might be applications not using WinPcap that
wouldn't have those problems; I don't personally know of any to recommend,
however.