Another solution (much more straightforward) is the one described here

http://winpcap.polito.it/misc/faq.htm#Q-18

GV


----- Original Message ----- 
From: "J.J. Guy" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, July 23, 2003 3:30 AM
Subject: Re: [WinPcap-users] WinPcap inXP


The application needs to be installed as a service.  It will then run as
SYSTEM.  That should fix the security-related problem.

In NT and 2k, you can create your own services using the sc.exe command line
tool out of the NT and 2k resource kits.  I have no experience with XP.

Services require specific callback functions for the start, stop and pause
calls.  If I recall correctly, a "normal" exe may be installed as a service,
with the main() function acting as the start callback.  Can't say for
certain - it's been a while.  Good luck.

JJ


> From: Diederich Schultz <[EMAIL PROTECTED]>
> Reply-To: [EMAIL PROTECTED]
> Date: Wed, 23 Jul 2003 00:07:49 +0000
> To: [EMAIL PROTECTED]
> Subject: [WinPcap-users] WinPcap inXP
>
> Hello everyone,
>
> I need some help with WinPcap and I have read from various sources
> (http://www.ethereal.com/faq.html, http://winpcap.polito.it/misc/faq.htm)
> that I am not the only one with this problem.
>
> A normal user is unable to capture packets on my Windows XP machine. The
> Network Card does not appear in the Adapter List. Ethereal does not work.
> Neither does Windump (Application Error).
> I tried quite a lot of versions of each software, up to Windump 3.8,
> Ethereal 0.9.13a and WinPcap 3.01a.
> With no success.
> But when I use a privileged account like administrator and run Ethereal
(or
> another WinPcap based application), everyone is now able to capture
packets.
> Until the computer is shut down.
>
> So I would like to configure a small command line like this: tethereal -c
3
> to run automatically with Windows XP startup, BEFORE any user logs on to
the
> system.
> Do you know if such thing is possible under WinXP? It used to be possible
in
> previous Windows versions, but I could not find any
> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
> in XP registry. .. ? ?
>
> Is it possible to run an application with "administrative credentials"?
> Without asking for password?
>
> I searched XP List of Services and found a service called "Remote Packet
> Capture Protocol v.0 (experimental)" that points to "%Program
> Files%\WinPcap\rpcapd.exe", but I could not make it work.
> (I spent two days trying to configure this service with no success).
>
> Today I also read that I shoud look for an "NPF" Service, named "Netgroup
> Packet Filter", and msinfo32.exe reports that this service is installed
but
> "NOT STARTED". Start mode is MANUAL.
> This NPF service only appears when I run msinfo32, it is not listed in
> Windows "normal" list (My Computer-->Adm...->Services...)
> Where can I find this service in order to configure it?
>
> Please, could you help me to solve this problem?
> I am quite angry with Windows XP, because WinPcap used to work fine in
> Windows 98.
>
> I say "Thanks" to everyone who is reading this mail.
> Thank you very much for your attention.
>
> Have a nice day,
> Diedrich Schultz.
>
> _________________________________________________________________
> Fotos - MSN Fotos das virtuelle Fotoalbum. Allen Freunden zeigen oder
> einfach online entwickeln lassen:
> http://photos.msn.de/support/worldwide.aspx
>
>
>
> ==================================================================
> This is the WinPcap users list. It is archived at
> http://www.mail-archive.com/[EMAIL PROTECTED]/
>
> To unsubscribe use
> mailto: [EMAIL PROTECTED]
> ==================================================================



======================
 This is the WinPcap users list. It is archived at
 http://www.mail-archive.com/[EMAIL PROTECTED]/

 To unsubscribe use
 mailto: [EMAIL PROTECTED]
======================





==================================================================
 This is the WinPcap users list. It is archived at
 http://www.mail-archive.com/[EMAIL PROTECTED]/

 To unsubscribe use 
 mailto: [EMAIL PROTECTED]
==================================================================

Reply via email to