Ethereal-users: Re: [Ethereal-users] Ethereal unable to capture outgoing packets on Windows2000
> However, compiling Ethereal
> against WinPcap 2.1 using Visual C++ 6 has resulted in an even more broken
> executable, which is unable to perform any capturing at all.
Did you uninstall the older WinPcap completely - *including* any header
files or libraries from the developer's pack?
> 1. Is being linked into a buggy WinPcap really the cause of this problem
> with Ethereal on Win32?
At least on non-WAN interfaces, yes; it didn't work with WinPcap 2.02,
but it *does* work for me with WinPcap 2.1 on Windows 2000.
However:
http://netgroup-serv.polito.it/winpcap/misc/faq.htm
"Q-3: Can I use WinPcap on a PPP connection?
A: We have tested WinPcap on PPP connections under Windows 95 and
Windows 98 and it seems to work well. Under Windows NT and Windows 2000
there are problems with the binding process, that prevents a protocol
driver from working on the WAN adapter if it is not written by
Microsoft."
so if you're capturing traffic on a dial-up connection rather than, say,
an Ethernet LAN, there may be *other* reasons, over and above the bug in
question, why you wouldn't be able to capture traffic.