["Dick Griest" <dgriest@xxxxxxxxxxxxx>]

Dear Ethereal Support Team:

 

Since my earlier email is being reviewed by a monitor to make sure it's not SPAM, perhaps you can just cancel it and post this update instead.

 

Subsequent to my email below I downloaded Ethereal 0.10.6 and was delighted to find out that adapter interfaces show up in that version when you go to start a capture.  I now get to chose between two adapters: Generic Ndis Wan adapter & Wan (PPP/SLIP) see attached photo 0.10.6.gif.  This is an improvement over Ethereaal 0.10.9 where no adapters showed up.  Zippo!

 

But after I installed 0.10.6 and then reinstalled 0.10.9, magically everything is now working in 0.10.9 and I get the same adapters I got in 0.10.6.  So perhaps this is the fix?  (Note: I have been running WinPcap_3_1_beta4.exe all along.  No changes or reinstalls there.  Once I saw the npf NetGroup Packet Filter Driver running using msinfo32 as described http://winpcap.polito.it/misc/faq.htm#Q-4 I figured the problem was in Ethereal.

 

In any case it's not a matter of administrative privileges http://www.ethereal.com/faq.html#capprobwin  , as there is only one account on my Win 2K box, and I'm it. (the admininistator)  This "no adapters" issue has been floating for some time and while all my experiences are with the same version of WinPcap_3_1_beta4.exe the boys in Italy may not be off the hook entirely http://www.effetech.com/forum/viewtopic.php?t=37

 

Once the latest version of Ethereal started working, the interface adapter appeared as WAN (PPP/SLIP) Interface: \Device\NPF_{E486F8E3-EAC9-4BC2-99FE-50D05DD77C4C} 

 

The last part of this string appeared in the keys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NetBT\Parameters\Interfaces\Tcpip_{E486F8E3-EAC9-4BC2-99FE-50D05DD77C4C}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{E486F8E3-EAC9-4BC2-99FE-50D05DD77C4C}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\NetBT\Parameters\Interfaces\Tcpip_{E486F8E3-EAC9-4BC2-99FE-50D05DD77C4C}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Tcpip\Parameters\Interfaces\{E486F8E3-EAC9-4BC2-99FE-50D05DD77C4C}

 

So if all else fails you just concatonate the two strings and poke it in the eye as described in this previous fix http://www.ethereal.com/lists/ethereal-users/200407/msg00109.html 

 

Regards,

Dick Griest

 

----- Original Message -----

From: Dick Griest

To: ethereal-users@xxxxxxxxxxxx

Sent: Friday, February 11, 2005 5:03 PM

Subject: PPP adapter disappeared with Ethereal 0.10.9

Dear Ethereal Support Team,

 

You may be interested to know that I can capture my dial-up adapter modem using Ethereal 0.10.3 but not with the new version Ethereal 0.10.9.

 

I am running WinPcap_3_1_beta4.exe on W2K SP3.  Under Ethereal 0.10.3 when you click capture then click start you see the adapter interface "Generic NdisWan adapter: \Device\NPF_GenericNdisWanAdapter" in the pull down window right at the top.  (I have no ethernet network interface card i.e. NIC so this is the only interface available)  Under Ethereal 0.10.9 when I click on capture then click interface, I have no adapters at all to choose from.

 

I like the new GUI layout which took place somewhere between these two versions.  Particulaly nice is the triangle indicator which shows where the packets are coming from at any instant in time by moving the triangle on the line that corresponds to that IP address . Also neat is how it walks you through step by step in formulating filter strings. Too bad the new GUI won't work for me.

 

I came across this post http://www.ethereal.com/lists/ethereal-users/200404/msg00310.html  which tipped me off that Ethereal could now work with PPP on W2K.  I tried it  three years ago and discovered to my disappointment that it didn't work then.  I think you could post a link to Questions 6 & 25 in this FAQ http://winpcap.polito.it/misc/faq.htm  a little more prominently which states that PPP has been added as of WinPcap_3_1 beta, but that it isn't accessible any longer in Ethereal.

 

Regards,

Dick Griest

Attachment: 0.10.6.gif
Description: GIF image