The Win32 binaries for Ethereal 0.8.12 are now available for download at:
http://ethereal.zing.org/distribution/win32
The packet-capturing version is:
http://ethereal.zing.org/distribution/win32/ethereal-0.8.12-capture.zip
The non-packet-capturing-but-file-reading version is:
http://ethereal.zing.org/distribution/win32/ethereal-0.8.12-non-capture.zip
Running Ethereal, Tethereal, and Editcap on Win32
=================================================
You need the glib and gtk libraries for running Ethereal.
These packages for win32 can be found at:
http://ethereal.zing.org/distribution/win32
and at the home page for the GTK+ for Win32 project:
http://www.gimp.org/~tml/gimp/win32
or
http://www.iki.fi/tml/gimp/win32/
(the mirror nearer to you may be faster).
Make sure the glib and gtk DLL's are in your path when you run
Ethereal. This includes gtk-*.dll, glib-*.dll, gmodule-*.dll, gdk-*.dll,
and gnu-intl.dll. As of the 20000805 GTK+/GLIB distribution, gthread-*.dll
is no longer needed.
The Win32 Binary distribution, available from
http://ethereal.zing.org/distribution/win32
used different version of the GTK+/GLIB libraries at different points
in time:
Ethereal Version GTK+/GLIB version
---------------- -----------------
0.8.11 and after 20000805
0.8.9 - 0.8.10 20000416
0.8.8 and before 19990828
Capturing Packets
-----------------
Remember, if using the the Win32 Binary distribution, available from
http://ethereal.zing.org/distribution/win32
there are two separate packages, one with non-capturing tools, and
one with capturing tools. Install the appropriate package. The
capturing version requires WinPcap, the non-capturing version does not.
In order to capture with Win32, you need to install the NDIS
packet capture driver for your particular Win32 OS; drivers for Windows
9x, Windows NT 4.0, and Windows 2000 can be downlaoded from the
WinPcap home page:
http://netgroup-serv.polito.it/winpcap/
If Ethereal is not capturing packets, you can test your WinPcap
installation by installing WinDump (TCPdump for Windows) ported by the
same folks who make WinPcap. It's at:
http://netgroup-serv.polito.it/windump/
They also make Analyzer, a GUI sniffer for Win32:
http://netgroup-serv.polito.it/analyzer/
Enjoy!
--gilbert
