Wireshark · Ethereal-users: Re: [Ethereal-users] Winpcap 2.3 problem

[Guy Harris <guy@xxxxxxxxxx>]

On Fri, Mar 29, 2002 at 12:29:43AM +0100, Richard Hirner wrote:
> > > I found out that it captures packets only when I limit the size to
> > > 68 to 74 bytes. Beginning from a limit of 75 bytes, it
> > > doesn't work anymore.
> >
> > Is that the case with Ethereal, or with all applications?
> 
> Only with Ethereal does show this behaviour. Windump and other Winpcap
> applications work as they should.

Even when you run

	windump -s 65535

it shows that behavior?

If so, then please:

	un-install WinPcap;

	use "For Files and Folders..." under the "Search" item in the
	"Start" menu to search for files named "wpcap.dll";

	remove *all* the ones it finds;

	use "For Files and Folders..." under the "Search" item in the
	"Start" menu to search for files named "packet.dll";

	remove *all* the ones it finds;

	re-install WinPcap 2.3;

	try again;

to make sure Ethereal is using the same DLLs that the other applications
are using.  (The last time a user reported that Ethereal was behaving
differently from WinDump, it turned out that they had some different
DLLs in the same directory as the Ethereal EXE file, so Ethereal and
WinDump were *not* using the same DLLs; getting rid of the extra DLLs
cleared their problem up.)