Wireshark-users: [Wireshark-users] ethereal eating packets?
From: "Howe, Jess" <jess.howe@xxxxxxxxxx>
Date: Tue, 19 Sep 2006 07:22:33 -0700

Hi,

I am developing a virtual miniport driver that basically has an NDIS upper edge, and a WDM lower edge. During normal operation everything works fine; packets are sent and received correctly. However, when I load up ethereal and start capturing, it appears that ethereal sees all the packets, but the apps don’t. For example, I can ping a remote computer just fine when ethereal isn’t running, but when it is capturing, ethereal sees the ping requests and replies, but the actual ping program just keeps timing out. Any idea what can cause this? I am using ethereal 0.99.0 and winpcap 3.1.

 

Thanks,

Jess