Originally posted on ethereal-users, referred to
winpcap-users from there.

Running on Windows XP SP2 with Ethereal versions
0.10.10 and WinPCap 3.0.

If I provide the following capture filter:

    port 25

in order to capture an SMTP transaction, I see only
packets with destination port 25 -- I.e. I see the
the client's outgoing packets only.

However, if I capture with NO filter specified, I see
all packets, so I know WinPCap is capturing all the
traffic.

I also tried

    src port 25 || dst port 25

but the results were the same. This used to work
just fine.  Has something changed or am I missing
something?

I also tried Ethereal 0.10.9 and WinPCap 3.1beta4 with
the same results.

--
James Garrison                                Athens Group, Inc.
mailto:[EMAIL PROTECTED]                    5608 Parkcrest Dr
http://www.athensgroup.com                    Austin, TX 78731
PGP: RSA=0x92E90A3B DH/DSS=0x498D331C         (512) 345-0600 x150



==================================================================
This is the WinPcap users list. It is archived at
http://www.mail-archive.com/winpcap-users@winpcap.polito.it/

To unsubscribe use mailto: [EMAIL PROTECTED]
==================================================================

Reply via email to