Ethereal-users: Re: [Ethereal-users] NT4 reads tr packets as ethernet II

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Gilbert Ramirez <gilramir@xxxxxxxxx>
Date: Thu, 29 Mar 2001 10:14:29 -0600
"Ph. Marek" wrote:
> 
> >
> >If you have ever gotten Ethereal to capture packets on Windows, the
> >machine on which you ran Ethereal has WinPcap installed.
> But thats only the library!
> I need some kind of executable to capture packets, don't I?
> 
> >       3) do all your capturing with WinPcap (which supports capture
> >          filters - using the same syntax as Ethereal) - remember to
> >          specify "-w" to save the capture to a file, and to specify "-s
> >          65535" if you want more than the small 68 byte captures that
> 
> So how should I do that?

Guy meant to say "WinDump". It's at
http://netgroup-serv.polito.it/windump/

WinDump is to tcpdump as WinPcap is to libpcap.

--gilbert