Wireshark-dev: Re: [Wireshark-dev] How to diagnose "failure to capture" situation?
You may want to read this http://www.winpcap.org/misc/faq.htm#Q-16, and follow the link to http://www.micro-logix.com/WinPcap/Supported.asp to check on how successful others have been in using the particular adaptor you're trying to use Wireshark/WinPcap with. You might also consider posting your question on the WinPcap mailing list, but you should probably indicate the specific adaptor and WinPcap version you're using.
________________________________
From: wireshark-dev-bounces@xxxxxxxxxxxxx on behalf of Sake Blok
Sent: Sat 11/10/2007 2:53 PM
To: Developer support list for Wireshark
Subject: Re: [Wireshark-dev] How to diagnose "failure to capture" situation?
Hi Chris,
Many Windows drivers for Wireless cards do not support the "promiscuous"
mode well. Do you see any packets when you start a capture with promiscuous
mode off? Of course this means you will only see broadcasts, multicasts and
unicasts to/from the pc running Wireshark.
Cheers,
Sake
----- Original Message -----
From: "Chris Markle" <cmarkle@xxxxxxxxxxxxxx>
To: <wireshark-dev@xxxxxxxxxxxxx>
Sent: Friday, November 09, 2007 7:55 PM
Subject: [Wireshark-dev] How to diagnose "failure to capture" situation?
> Hi folks,
>
> I had a customer of ours install Wireshark 0.99.6a and WinPcap to help
> us disgnose a networking issue involving their Windows XP system. No
> matter what form of installing, uninstalling, rebooting, etc. we did,
> we could not get Wireshark to capture on his wireless interface. What
> I am used to seeing is when I open the Capture -> Interfaces window, I
> see packet counts on active interfaces, even if capture is not
> started. I see no packet counts on any of his interfaces even though
> his computer is clearly connected to the internet. Then if I try to
> capture on the wireless interface anyway, I see no packets captured.
>
> What kinds of things can I do to diagnose what's going on here?
>
> Thanks in advance.
>
> Chris
> _______________________________________________
> Wireshark-dev mailing list
> Wireshark-dev@xxxxxxxxxxxxx
> http://www.wireshark.org/mailman/listinfo/wireshark-dev
>
_______________________________________________
Wireshark-dev mailing list
Wireshark-dev@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-dev
-----------------------------------------
This email may contain confidential and privileged material for the
sole use of the intended recipient(s). Any review, use, retention,
distribution or disclosure by others is strictly prohibited. If you
are not the intended recipient (or authorized to receive for the
recipient), please contact the sender by reply email and delete all
copies of this message. Also, email is susceptible to data
corruption, interception, tampering, unauthorized amendment and
viruses. We only send and receive emails on the basis that we are
not liable for any such corruption, interception, tampering,
amendment or viruses or any consequence thereof.
<<winmail.dat>>
