[WinPcap-users] Window XP Pro SP2 lockup in Ethereal with Winpcap 3.1b4

2005-05-09 Thread Idon .
Hello, There is a bug, possibly in Winpcap 3.1b4, that causes Windows XP,SP2 to lock up (requiring a hard reboot) when any version of Ethereal newer than 0.10.9 is used for capturing with the "Update list of packets in real time" option checked. If the option is not checked, everything is okay

Re: [WinPcap-users] How to capture packet from "Any" device using WinPcap.

2005-05-09 Thread Guy Harris
Liang Yang wrote: In libpcap, we can use "any" as the device name to capture packets from any devices. In libpcap *ON LINUX* you can use "any" as the device name to capture from all devices. On other UN*Xes the "any" device isn't supported. But Windows XP does not support "Any" device and I do n

[WinPcap-users] Re:[Fwd: Not receiving messages posted to winpcap-users]

2005-05-09 Thread James Garrison
Problem solved. My apologies, and please ignore previous message about mailing list problems. -- James GarrisonAthens Group, Inc. mailto:[EMAIL PROTECTED]5608 Parkcrest Dr http://www.athensgroup.comAustin, TX 78731 PGP: RSA=0x

Re: [WinPcap-users] Capture Filter on port - strange behavior

2005-05-09 Thread James Garrison
I should have thought of that :-) However, when I do what you suggest, the offline filter shows BOTH sides of the conversation. The problem seems to occur only when filtering during an actual live capture. I have followed the website procedures for submitting a bug and sent the info to the winpcap

[WinPcap-users] How to capture packet from "Any" device using WinPcap.

2005-05-09 Thread Liang Yang
Hi,   In libpcap, we can use "any" as the device name to capture packets from any devices. But Windows XP does not support "Any" device and I do not want to ask the user to select which device to capture packets. How to do this using WinPCap?   Thanks,   Liang  

Re: [WinPcap-users] Capture Filter on port - strange behavior

2005-05-09 Thread Gianluca Varenni
Hi James. Can you please try to dump the packets to disk with windump (no filter), then try to offline filter those packets offline with windump? If it fails, please send me then unfiltered trace file, and I'llk try to reproduce the problem. Steps: 1. Capture to file "windump -i -w somefile.cap

Re: [WinPcap-users] Re: Capture Filter on port - strange behavior

2005-05-09 Thread Loris Degioanni
James, can you do a couple more tests? - does the problem happen *whatever* filter you set? (e.g. "ip", "tcp", "udp") - does anything changes if you enable/disable promiscuous mode? Loris James Garrison wrote: Yes, I tried both 3.0 and 3.1b4 with the same results. ===

[WinPcap-users] Re: Capture Filter on port - strange behavior

2005-05-09 Thread James Garrison
Yes, I tried both 3.0 and 3.1b4 with the same results. -- James GarrisonAthens Group, Inc. mailto:[EMAIL PROTECTED]5608 Parkcrest Dr http://www.athensgroup.comAustin, TX 78731 PGP: RSA=0x92E90A3B DH/DSS=0x498D331C (512)

[WinPcap-users] [Fwd: Not receiving messages posted to winpcap-users]

2005-05-09 Thread James Garrison
Tried sending this to winpcap-users-owner but the message bounced. Original Message Subject: Not receiving messages posted to winpcap-users Date: Mon, 09 May 2005 11:32:35 -0500 From: James Garrison <[EMAIL PROTECTED]> Organization: Athens Group, Inc. To: [EMAIL PROTECTED] I subsc