From: "Fulvio Risso" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> CC: <[EMAIL PROTECTED]> Subject: RE: [WinPcap-users] WinPcap inXP Date: Wed, 23 Jul 2003 14:59:25 +0200
> I searched XP List of Services and found a service called "Remote Packet > Capture Protocol v.0 (experimental)" that points to "%Program > Files%\WinPcap\rpcapd.exe", but I could not make it work. > (I spent two days trying to configure this service with no success).
Why? How can you say that it doesn't work?
This daemon allows capturing you local traffic from a tool which is on another machine. Whas this your purpose?
fulvio
Fulvio. ---------
Thank you very much for your answer.
When I say "It does not work" I mean that Ethereal and Windump do not work.
Neither of this application is able to capture packets (from a limited user account) because they can not find the network adapter.
I thought it was a problem with this "Remote Packet Capture Protocol v.0 (experimental)", because this service seems to be started from an executable file located in WinPcap directory :"%Program Files%\WinPcap\rpcapd.exe".
Ethereal and Windump depend on Winpcap, so "here is the trouble", I thought.
Some people in this mailing group have already helped me to find the solution.
I had to start another service, called NPF, "Netgroup Packt Filter", through the Registry Editor.
Now everything is working fine: Ethereal, Windump, Winpcap.
I work as "System Administrator Assistant" in my University, and I my purpose is to configure each computer according to some rule or policy.
In the "Network Lab" every computer must be able to capture packets, from a normal user account.
This Lab is for network students, and they need to "sniff the network" and experiment in order to learn.
But in any other Lab, no student must be able to "sniff" the network. Only administrators must have this privilege.
I think I have the solution now. Thank you very much.
Diedrich Schultz.
_________________________________________________________________ MSN - More Useful Every Day http://www.msn.de
================================================================== This is the WinPcap users list. It is archived at http://www.mail-archive.com/[EMAIL PROTECTED]/
To unsubscribe use mailto: [EMAIL PROTECTED]
==================================================================
