Ethereal-users: Re: [Ethereal-users] Etheral not capturing sent packets in NT?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Tue, 2 Jan 2001 22:48:44 -0800
On Wed, Jan 03, 2001 at 05:26:57PM +1100, Jesus M. Salvo Jr. wrote:
> Tried WinPcap 2.1 beta... same results.

Note that WinPcap includes

	1) a driver - which isn't the code with the bug, so installing
	   the new driver won't make a difference;

	2) the packet.dll shared library, which implements a
	   Win32-specific API for packet capture (it provides the
	   equivalent of the BPF, or PF_PACKET/SOCK_PACKET, or DLPI,
	   or... API) - which isn't the code with the bug, so installing
	   the new shared library won't make a difference;

	3) the libpcap library, which contains the code with the bug -
	   but the WinPcap 2.02 libpcap was *not* a shared library, so
	   the code with the bug is linked into the Ethereal executable,
	   and installing WinPcap 2.1, although it will install a
	   libpcap shared library, won't change the code linked into the
	   Ethereal executable.

You'd have to rebuild Ethereal from source after installing WinPcap 2.1
in order to get an Ethereal executable that doesn't have the buggy code
linked into it.