PDA

View Full Version : Ethereal newbie - no packets captured


Roland Künzel
August 22nd 04, 01:37 PM
Hallo,

I want to observe the traffic between my browser and the Internet in
detail.
Although Ethereal 10.4 and WinPcap_3_1_beta_3 seams to be installed
correctly under WinMe the message list remains empty.

How can I find out what could be the reason for this behaviour?

Thanks for your help!

Roland

Richard G. Harper
August 22nd 04, 02:23 PM
Not all network cards are supported by Ethereal. Is yours? Check the
documentation or the Ethereal web site for details.

--
Richard G. Harper [MVP Win9x]
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


"Roland Künzel" > wrote in message
...
> Hallo,
>
> I want to observe the traffic between my browser and the Internet in
> detail.
> Although Ethereal 10.4 and WinPcap_3_1_beta_3 seams to be installed
> correctly under WinMe the message list remains empty.
>
> How can I find out what could be the reason for this behaviour?
>
> Thanks for your help!
>
> Roland

N. Miller
August 23rd 04, 07:34 AM
In article >, Roland K=FCnzel says...

> I want to observe the traffic between my browser and the Internet in
> detail.=20
> Although Ethereal 10.4 and WinPcap_3_1_beta_3 seams to be installed
> correctly under WinMe the message list remains empty.

> How can I find out what could be the reason for this behaviour?

You might try using WinPcap 3.0 instead. I am told the beta version of=20
WinPcap doesn't always work with Ethereal.

--=20
Norman
~Win dain a lotica, En vai tu ri, Si lo ta
~Fin dein a loluca, En dragu a sei lain
~Vi fa-ru les shutai am, En riga-lint

Roland Künzel
August 23rd 04, 09:19 PM
Ethereal 10.6 could not be started on my computer, but 10.4 works fine.

Perhaps, I now understand the problem which was the reason of my
posting: Ethereal obviously does not support software interfaces like
ISDN adapters?

"N. Miller" wrote:
>
> Künzel says...
> > ... Ethereal 10.4 and WinPcap_3_1_beta_3 ...

> You might try using WinPcap 3.0 instead. I am told the beta version of
> WinPcap doesn't always work with Ethereal.
>

N. Miller
August 24th 04, 04:45 AM
In article >, Roland K=FCnzel says...

> "N. Miller" wrote:

> > K=FCnzel says...

> > > ... Ethereal 10.4 and WinPcap_3_1_beta_3 ...=20

> > You might try using WinPcap 3.0 instead. I am told the beta version of
> > WinPcap doesn't always work with Ethereal.

> Ethereal 10.6 could not be started on my computer, but 10.4 works fine.

I suggested falling back to WinPcap 3.0 from WinPcap 3.1 beta 3. I said=20
nothing about running a higher version of Ethereal. FWIW, I can't run=20
Ethereal 0.10.6 either. My next lowest version, 0.10.5a also won't run. I=
=20
missed a couple of steps, and the latest working version I have is 0.10.0. =
I=20
will have to see if I can find 0.10.4 somewhere.

> Perhaps, I now understand the problem which was the reason of my
> posting: Ethereal obviously does not support software interfaces like
> ISDN adapters?

I don't know; I don't have one. It is choking when I try to run it on the=
=20
Ethernet adapter.

--=20
Norman
~Win dain a lotica, En vai tu ri, Si lo ta
~Fin dein a loluca, En dragu a sei lain
~Vi fa-ru les shutai am, En riga-lint

N. Miller
August 24th 04, 04:57 AM
In article >, Roland K=FCnzel says...

> Perhaps, I now understand the problem which was the reason of my
> posting: Ethereal obviously does not support software interfaces like
> ISDN adapters?

Just checking the site, found the later versions than I have between 0.10.0=
=20
and 0.10.5a. I also checked the FAQ, and found a question that applies to=
=20
your question about ISDN adapters:

http://www.ethereal.com/faq.html#q3.1

"# WinPcap 3.0 doesn't support PPP WAN interfaces, and WinPcap 2.3 doesn't=
=20
support PPP WAN interfaces on Windows NT/2000/XP/Server, so Ethereal cannot=
=20
capture packets on those devices with WinPcap 3.0, or with WInPcap 2.x when=
=20
running on Windows NT/2000/XP/Server. Regular dial-up lines, ISDN lines, an=
d=20
various other lines such as T1/E1 lines are all PPP interfaces. This may=20
cause the interface not to show up on the list of interfaces in the "Captur=
e=20
Options" dialog."

It looks like you will need to use WinPcap 2.1, or WinPcap 2.2.

--=20
Norman
~Win dain a lotica, En vai tu ri, Si lo ta
~Fin dein a loluca, En dragu a sei lain
~Vi fa-ru les shutai am, En riga-lint

Roland Künzel
August 28th 04, 07:20 AM
"N. Miller" wrote:
>
> ... Regular dial-up lines, ISDN lines, and
> various other lines such as T1/E1 lines are all PPP interfaces. This may
> cause the interface not to show up on the list of interfaces in the "Capture
> Options" dialog."

It looks up; however, if the option with the ISDN adaptor is selected,
no recording takes place. Only for this reason, I am now routing the
traffic for the ISDN adaptor via a software router over a local
Ethernet.

I would prefer not having to employ the local Ethernet and having all
done on the one computer having access to the Internet via the ISDN
adaptor.

Is there anybody who knows how Ethereal really works? At which
interfaces takes the measurement place which Ethereal performs? Is this
an API function of the operating system, or what?

With other words, are there any configurations where Ethereal
facilitates a measurement on a PC without having any network card
installed on the PC?

Roland