[Jack Jackson <jack@xxxxxxxxxxxxxxx>]

There must be something different with your setup.  I and some of my 
co-workers have used ZoneAlarm Pro for a number of years on a variety of 
NT, Win2000 and XP machines and have had no problems capturing with Ethereal.

At 10:34 AM 5/2/2005, Claude Chauveau wrote:
> Hi all,
>
> The problem was caused by a software firewall, Zone Alarm Pro, which was
> also installed on the Win98 machine.  Apparently, the layered service
> provider (LSP) for the firewall was interfering with the NPF capture driver.
> When I switched off the firewall, Ethereal was able to capture network
> traffic just fine.
>
> I have verified that this problem also occurs on all Windows machines
> (Win98, Win2000, WinXP, etc.) that have ZoneAlarm Pro installed. Perhaps
> this would be useful to post under your FAQ's.
>
> Thanks,
>
> ___________________
> Claude Chauveau
> cjc@xxxxxxxxxxx
>
>
> -----Original Message-----
> From: Claude Chauveau [mailto:cjc@xxxxxxxxxxx]
> Sent: Sunday, May 01, 2005 1:54 AM
> To: ethereal-users@xxxxxxxxxxxx
> Subject: Ethereal & Win98SE
>
>
> Hi all,
>
> I installed Ethereal V 0.10.10 and WinPCap 3.0 on a Windows 98SE machine
> with a standard 3COM 100/10 NIC, which I regularly use to run SnifferPro
> V3.0.  It appears that Ethereal/WinPCap is not able to force the NIC into
> promiscuous mode when capturing, as I only see ARP's and broadcast messages.
>
> Has anyone else encountered this kind of issue when using a Win98SE machine,
> and if so, does anyone know the fix for this?
>
> Thanks much!