Ethereal-users: Re: [Ethereal-users] Etheral not capturing sent packets in NT?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Tue, 2 Jan 2001 19:20:37 -0800
On Fri, Dec 22, 2000 at 05:38:43PM +1100, Jesus M. Salvo Jr. wrote:
> I noticed that if I tell etheral to start capturing packets, but 
> disabled promiscuous mode, it does not capture packets that my host 
> sent.

It's a bug in WinPcap; it's setting the NDIS "filter" (which has nothing
to do with BPF-style packet filters) to NDIS_PACKET_TYPE_DIRECTED, not
NDIS_PACKET_TYPE_ALL_LOCAL.

It's fixed in WinPcap 2.1, which is currently in beta.