Title: I need help using the rpcap functionality with Ethereal
Hi.
Regarding your question about PPP/WAN support, I think that
that Ethereal error message is somewhat misleading: winpcap 2.3 supported
PPP/WAN but, due to the large number of user problems (blue screens), we
disabled PPP
Hi.
First of all, the support for WAN we added into winpcap3.1beta
should be transparent to the user, i.e. you can use wan adapters with both
PacketXXX and pcap_XXX APIs. As a consequence, all the stuff contained in
WanPacket.cpp/.h SHOULD NOT be used (in fact, it is not exported in the
Hi.
What version of winpcap are you using? Have you tried winpcap 3.1 beta?
Have a nice day
GV
- Original Message -
From: Eivind Pedersen [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, February 12, 2004 4:10 PM
Subject: [WinPcap-users] Lost wireless connection
I have a
- Original Message -
From: Jeff Curley [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, February 10, 2004 9:20 PM
Subject: [WinPcap-users] packet lengths off by 4 bytes?
I am some what new to PCap, but I am familiar with network code and packet
sniffers, so I downloaded the
Hi.
It is not possible to install winpcap without admin rights; the problem is
not related to copying the file to the folder (which is, however, write
protected to non-admin users). The problem is that windows requires admin
rights to install the driver through the service control manager.
Have
Hi.
You should report the bug as explained at
http://winpcap.polito.it/contact.htm
Be sure to Test the latest version on winpcap (3.1 beta) before submitting a
bug report.
Have a nice day
GV
- Original Message -
From: Jonathan Halterman [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent:
The beta of WinPcap 3.1 is available from today in the download section of
the WinPcap site.
WinPcap 3.1 beta is a main update, with a good number of bug fixes and new
features.
The most important is the support for NdisWan connections (dial-up and VPN)
by means of the NetMon API. Please note
You cannot send a packet larger that 1514 bytes on an Ethernet network,
because that is the maximum packet size supported by the standard.
Have a nice day
GV
- Original Message -
From: [EMAIL PROTECTED]
To: winpcap-users [EMAIL PROTECTED]
Sent: Saturday, November 22, 2003 3:36 PM
Hi.
You can use pcap_stats_ex() API.
Have a nice day
GV
- Original Message -
From: Selcuk Cevher [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, November 24, 2003 10:20 AM
Subject: [WinPcap-users] how to retrieve the number of packets received by
network tap and filter?
hi
Hi.
You need VS6 or VS.NET to use the lib files provided with WinPcap
developer's pack.
Have a nice day
GV
- Original Message -
From: Kwun-Nan Lin [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, November 24, 2003 11:00 PM
Subject: [WinPcap-users] Have problem in linking wpcap.lib
It's possible to capture from more than one adapter concurrently, but you
have to open several capture instances (i.e. it's not possible to open all
the adapters within a single winpcap instance, as opposed to linux).
GV
- Original Message -
From: Toby Harris [EMAIL PROTECTED]
To:
Yes, it's supported. We haven't updated the
web, yet.
GV
- Original Message -
From:
Pugatzky, Ori
To: '[EMAIL PROTECTED]'
Sent: Thursday, July 31, 2003 5:24
PM
Subject: [WinPcap-users] WinCap OS
Support
It's WinPcap 3.0 final.
Have a nice day
GV
- Original Message -
From: Richard Jagodzinski [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, July 28, 2003 7:25 PM
Subject: [WinPcap-users] What version is the currently available silent
installer?
Hi,
Is it version 3.0 beta or
Hi.
There's no such pcap_freealldevs_ex in WinPcap. You must use
pcap_freealldevs, even if you use pcap_findalldevs_ex.
Have a nice day
GV
- Original Message -
From: lee kyung moon [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, July 28, 2003 1:23 AM
Subject: [WinPcap-users] where
Another solution (much more straightforward) is the one described here
http://winpcap.polito.it/misc/faq.htm#Q-18
GV
- Original Message -
From: J.J. Guy [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, July 23, 2003 3:30 AM
Subject: Re: [WinPcap-users] WinPcap inXP
The
WinPcap 3.01 alpha is available from today at
http://winpcap.polito.it/301a/download.htm
It contains also an updated documentation at
http://winpcap.polito.it/301a/docs/index.html
CHANGELOG
=
- Modified interface for function pcap_findalldevs_ex in order to support
local files
First of all, it's not net start|stop netfilter, it's net start|stop
npf.
Moreover, winpcap 2.3 has some problems with net start/stop (more or less it
works on XP, it does not work on 2k). We have fixed the problem in one of
the winpcap 3.0 alpha releases.
GV
- Original Message -
From:
The beta of WinPcap 3.0 is available from today in the download section of
the WinPcap site. The main improvements of this release are:
- experimental support for SMP machines
- kernel buffering rewritten from scratch
- experimental support for remote capture.
CHANGELOG
=
- New features
The beta of WinPcap 3.0 is available from today in the download section of
the WinPcap site. The main improvements of this release are:
- experimental support for SMP machines
- kernel buffering rewritten from scratch
- experimental support for remote capture.
CHANGELOG
=
- New features
Hi.
Can you please send a bug report as explained at
http://winpcap.polito.it/contact.htm?
Did you install winpcap (and used a winpcap based app) locally or through
terminal server client?
GV
- Original Message -
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, November 11,
It's very strange, we work on dell laptops (inspiron), both with integrated
cards, and PCMCIA adapters, and we haven't had any problem.
Could you please send a bug report as explained at
http://winpcap.polito.it/contact.htm (bottom half of the page).
GV
- Original Message -
From:
Unfortunately, this patch works on Win2000 (this an undocumented feature),
but does not work on NT4. Moreover I suppose this does not work on XP, since
the flag to be set (NDIS_FLAGS_SKIP_LOOPBACK on Win2k) is different.
Look at the winpcap-users archive, I posted some links to the ddk newsgroups
I think you have to ask the libpcap team for this kind of issue
(www.tcpdump.org)
GV
- Original Message -
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 20, 2002 12:19 PM
Subject: [WinPcap-users] Trafic generator in WinPcap Dev pack AND UNIX
Hi,All.
I
://windump.polito.it/misc/bin/3.0alpha-WinPcap.exe
Gianluca Varenni
on behalf of the WinPcap team
==
This is the WinPcap users list. It is archived at
http://www.mail-archive.com/winpcap-users@winpcap.polito.it/
To unsubscribe use
mailto
- Original Message -
From: P.J. Malloy [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, September 27, 2002 10:23 AM
Subject: Re: [WinPcap-users] winpcap and wireless lan NICs: only captures in
one direction?
A follow up to my immediately prior posting.
I should add that I am
What do you mean by reorder?
GV
- Original Message -
From: Igor Taranov [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, October 01, 2002 4:36 AM
Subject: [WinPcap-users] Packets reordering with latest npf.sys
I am using winpcap npf.sys for UDP traffic generator application.
Hi.
Are you using winpcap on SMP? WinPcap does NOT work on SMP, at the moment
(as clearly stated in the FAQs).
If it's not your case, send a bug report as explained at
http://winpcap.polito.it/contact.htm
GV
- Original Message -
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent:
http://winpcap.polito.it/misc/faq.htm#q-18
GV
- Original Message -
From: Marian Adelin [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Sunday, September 29, 2002 9:20 PM
Subject: Re: [WinPcap-users] winpcap and wireless lan NICs: only
It's possibile using this lib to discard packet
I think you should ask such question to the winpcap-users mailing list.
Details at http://winpcap.polito.it/contact.htm
GV
- Original Message -
From: Shen Mu-Y17595 [EMAIL PROTECTED]
To: '[EMAIL PROTECTED]' [EMAIL PROTECTED]
Sent: Friday, September 20, 2002 10:42 PM
Subject:
Hi.
Are you able to debug a program and tell me which WinPcap API is buggy?
GV
- Original Message -
From: Brian O'Connell [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, October 01, 2002 8:11 PM
Subject: [WinPcap-users] Upgrade from 2.3 to 3.0 alpha 2 problems
I upgraded
Hi.
Just a personal opinion: a mailing list is useful is the members are able to
understand what others are saying. If you write in your native language, and
it's not English, I think that very few winpcap-users will understand you...
...so, please use English!
GV
- Original Message
You didn't miss anything.
We hope to release an alpha2 by the end of the week.
GV
- Original Message -
From: Carl Petersen [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, September 16, 2002 10:08 PM
Subject: [WinPcap-users] Bug? caplen can be less by one after
PacketSendPacket
http://winpcap.polito.it/contact.htm
GV
- Original Message -
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, September 13, 2002 7:16 AM
Subject: [WinPcap-users] Some install problem
I download winpcap, and installed it, and reboot my computer, but when
I try to run
- Original Message -
From: Jay Sillars [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, August 30, 2002 12:40 AM
Subject: [WinPcap-users] FW: SetProcessAffinityMask
I understand that win-pcap has not been written or tested to work on
SMP machines.
Is there any way to set the
The correct syntax is ether src 00:b0:d0:22:7c:21
GV
- Original Message -
From: ¤_¥þx Chanjun Yu [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, August 22, 2002 2:04 AM
Subject: [WinPcap-users] RE: Set Mac address filter
Hi GV,
I wanna set a filter to capture specified
It is a common problem under Win9x: you have two PPPMAC (aka dial-up
connections) on your system, and WinPcap tries to capture from the first
one, always.
Try to:
- remove winpcap
- uninstall all the instances of the PPP adapter from the control panel
- reinstall the adapter
- reinstall winpcap
- Original Message -
From: Ben Brownlee [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, August 16, 2002 7:29 PM
Subject: [WinPcap-users] PacketOpenAdapter() and pcap_open_live
apparently these two functions don't get along well within the same
program. It looks as though you
You cannot capture on switched networks, since the machine running winpcap
does not receive other than packets to/from that host (and some other stuff,
like broadcast).
On switched networks, you have to connect the capturing machine on a
particular port of the switch (which is not present on all
, etc. This is unethical, has no good effects
on
network performance but it works, generally. I did it.
E.K.
Ok, I know that technique. I explained a clean solution ;)
GV
- Original Message -
From: Gianluca Varenni [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, August 09
No, but we plan to support it in the release version (we have received just
two days ago an SMP machine to deal with the problem!)
GV
- Original Message -
From: flyhi [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, August 09, 2002 11:29 AM
Subject: Re: [WinPcap-users] ANNOUNCE:
- Original Message -
From: Jesper Munkholm Jensen (JMJ) [EMAIL PROTECTED]
To: WinPcap Users List (E-mail) [EMAIL PROTECTED]
Sent: Friday, August 09, 2002 11:35 AM
Subject: [WinPcap-users] Changes to the Packet.dll and kernell driver
Hi,
A quick question. I browsed through the new
.
- the timestamps are considered to be relative, so PacketSendPackets()
always starts to send immediately
Loris
I hope you can catch my drift as they say. I'm just a bit curious :o)
- Jesper Munkholm
-Original Message-
From: Gianluca Varenni [mailto:[EMAIL PROTECTED]]
Sent: 9
. I'm just a bit curious :o)
- Jesper Munkholm
-Original Message-
From: Gianluca Varenni [mailto:[EMAIL PROTECTED]]
Sent: 9. august 2002 12:21
To: [EMAIL PROTECTED]
Subject: Re: [WinPcap-users] Changes to the Packet.dll and kernell
driver
- Original Message
- Original Message -
From: David [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, August 09, 2002 6:40 PM
Subject: Re: [WinPcap-users] ANNOUNCE: WinPcap 3.0 alpha has been released
Hello,
Can This version solve the problem of loopback ?
That´s means, when I write a packet on
Hi.
This bug has been corrected in WinPcap 3.0 alpha.
GV
- Original Message -
From: Gordon Tyler [EMAIL PROTECTED]
To: WinPcap Users List [EMAIL PROTECTED]
Sent: Wednesday, August 07, 2002 9:07 PM
Subject: [WinPcap-users] Packet32.dll: PacketGetNetInfoEx problem
Winpcap version: 2.3
with packet.dll
Really? pcap is more powerful than packet32?
WinPcap said that packet32 is a low level driver , so I think it is more
powerful than pcap.
Do you agree?
-Original Message-
From: Gianluca Varenni [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 09, 2002 1:17 PM
To: [EMAIL
Yes, provided that you respect the license present on our
site(http://winpcap.polito.it/misc/copyright.htm).
Basically you must give acknowledgement to our work. We develop winpcap for
free, if you want to contribute to the development by buying something...
...we have a wish list
Send a message to [EMAIL PROTECTED],
containing "unsubscribe" in the body of the message (NOT in the
subject).
GV
- Original Message -
From:
Anthony
To: [EMAIL PROTECTED]
Sent: Thursday, August 01, 2002 3:14
PM
Subject: Re: [WinPcap-users] What
privileges
Ok.
SMP machines? WinPcap 2.3 does NOT work on SMP, and WinPcap 2.2 *seems* to
work on SMP (in the sense that the driver starts correctly); details on the
FAQs on our wesbsite http://winpcap.polito.it
If it's not your case, then post a bug report following the instructions at
the NT driver on NT4, the w2k one on win2k and XP.
GV
- Original Message -
From: Randall Jameson [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, July 22, 2002 7:52 PM
Subject: [WinPcap-users] Driver installation question
Hello,
When I run the WinPcap_2_3.exe driver
the developer's pack contains the includes and the libs to create your own
winpcap based application, as well as some examples.
The source code contains the sources of WinPcap (dlls as well as the kernel
driver), and it's useful only if you are interested in modifying the driver.
GV
Hi.
Remember that if you do not set any hw filter with
PacketSetHwFilter(), you won't receive any packet.
If you want to receive packets from/to your machine, then
use
PacketSetHwFilter(lpAdapter,NDIS_PACKET_TYPE_ALL_LOCAL)
GV
- Original Message -
From:
Rajasekharan. V
Hi.
Maybe I found what is the problem.
I think you have installed WinPcap 2.3: isn't it?
If so, it seems that the keys in the registry related to WinPcap are wrong:
go to
HKEY_LOCAL_MACHINE/System/CurrentControlSet/Services and remove the folder
NPF.
Next, reboot the machine.
Now WinPcap
No, it is not public.
If you want to know the reason, read all the mails in this thread of the the
mailing list
http://www.mail-archive.com/winpcap-users@winpcap.polito.it/msg00015.html
GV
- Original Message -
From: Szymek Madejczyk [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent:
Hi.
- Original Message -
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, June 04, 2002 8:31 AM
Subject: [WinPcap-users] How to Interrupt the driver, while it is in the
process of capturing.
Dear Sir/Madam,
We are using Winpcap driver over windows 2000. The scenario is
Hi.
Please read FAQ Q.21
http://winpcap.polito.it/misc/faq.htm#Q-21
In practice, you have installed ZXSniffer, that conflicts with WinPcap: they
use a driver that is **very** similar to our, infact in the registry (their)
driver (ZXS) is called Netgroup Packet Filter.
GV
- Original
Hi.
I really don't know.
Some users reported problems regarding timestamps using WinPcap 2.2 under
SMP (last year, if I remember well). The timestamps are generated at kernel
level (i.e. in npf.sys), through a call to KeQueryPerformanceCounter (if you
want to look at the sources, look at the
Hi.
First, it depends on how you declared the ethernet
header.
Second, the IP header has not a fixed length (it is
*usually* 20 bytes, but it's longer if it contains options).
Third, it is not safe to "printf("%s" payload)",
since the payload is not a string, but rather a sequence of bytes.
ader).
GV
- Original Message -
From:
Gianluca Varenni
To: [EMAIL PROTECTED]
Sent: Friday, May 31, 2002 3:23 PM
Subject: Re: [WinPcap-users] (CLASS
AC PROBLEM AGAIN)code is here please have a look...
Hi.
First, it depends on how you declared the
ethernet header.
Seco
Hi.
Please have a look at this msg on this mailing list (and replies).
http://www.mail-archive.com/winpcap-users@winpcap.polito.it/msg00056.html
GV
- Original Message -
From: Blas Antonio Cuesta Saez [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, May 29, 2002 5:34 PM
Hi.
Two options:
1. SMP (multiprocessor) machine? If so, winpcap does NOT work on SMP.
2. If it's not SMP, report the bug as explained at
http://winpcap.polito.it/contact.htm
(follow *carefully* the instructions at the bottom half of the page).
GV
- Original Message -
From: Wes
- Original Message -
From: noil sg [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, April 25, 2002 9:51 AM
Subject: Re: [WinPcap-users] trace windump via vc++6.0 (sp3)
Well, i am able to trace into packet.dll now. is this
really a kernel model driver??
packet.dll is a user
Hi.
First of all, did you read the FAQs at http://winpcap.polito.it?
Is the Proliant server a SMP machine? If so, as clearly stated on the FAQs,
WinPcap does NOT support SMP, at the moment.
If it's not the case, please follow the instructions to report bugs at
101 - 163 of 163 matches
Mail list logo
