Ethereal-users: Re: [Ethereal-users] recent capture filter failures

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxx>
Date: Sun, 21 Nov 2004 01:15:17 -0800
Cliff Smithson wrote:

Until recently Ethereal 0.10.6 w/ WinPCap 3.0 has worked on my XP machine. It
has degraded in the past two weeks by the fact that capture filters no longer
capture anything. I'm aware of the syntactic differences between display &
capture. Whereas
HOST 192.168.1.100
or
port 455
would formerly capture a subset ot the flood that is my network traffic, if I
want to capture anything I've got to capture everything. I don't like drinking
from the fire hydrant! Has a recent Redmond rewrite wrecked my routine?
The WinPcap driver was written in Torino, Piemonte, not Redmond, Washington, so it probably wasn't a Redmond rewrite.
Try capturing with those filters with WinDump and, if that doesn't work, either, report this as a bug to the WinPcap developers: 

	http://winpcap.polito.it/contact.htm
(assuming, that is, that your network didn't change from a non-switched network to a switched network if you were capturing "third party" traffic).