Ethereal newbie - no packets captured

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Roland =?iso-8859-1?Q?K=FCnzel?= - 22 Aug 2004 13:37 GMT

Hallo,

I want to observe the traffic between my browser and the Internet in
detail.
Although Ethereal 10.4 and WinPcap_3_1_beta_3 seams to be installed
correctly under WinMe the message list remains empty.

How can I find out what could be the reason for this behaviour?

Thanks for your help!

Roland

Reply to this Message

Richard G. Harper - 22 Aug 2004 14:23 GMT

Not all network cards are supported by Ethereal. Is yours? Check the
documentation or the Ethereal web site for details.

Signature

Richard G. Harper [MVP Win9x] rgharper@email.com
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

> Hallo,
>
[quoted text clipped - 8 lines]
>
> Roland

Reply to this Message

N. Miller - 23 Aug 2004 07:34 GMT

> I want to observe the traffic between my browser and the Internet in
> detail.
> Although Ethereal 10.4 and WinPcap_3_1_beta_3 seams to be installed
> correctly under WinMe the message list remains empty.

> How can I find out what could be the reason for this behaviour?

You might try using WinPcap 3.0 instead. I am told the beta version of
WinPcap doesn't always work with Ethereal.

Signature

Norman
~Win dain a lotica, En vai tu ri, Si lo ta
~Fin dein a loluca, En dragu a sei lain
~Vi fa-ru les shutai am, En riga-lint

Reply to this Message

Roland =?iso-8859-1?Q?K=FCnzel?= - 23 Aug 2004 21:19 GMT

Ethereal 10.6 could not be started on my computer, but 10.4 works fine.

Perhaps, I now understand the problem which was the reason of my
posting: Ethereal obviously does not support software interfaces like
ISDN adapters?

> Künzel says...
> > ... Ethereal 10.4 and WinPcap_3_1_beta_3 ...

> You might try using WinPcap 3.0 instead. I am told the beta version of
> WinPcap doesn't always work with Ethereal.

Reply to this Message

N. Miller - 24 Aug 2004 04:45 GMT

> > Künzel says...

> > > ... Ethereal 10.4 and WinPcap_3_1_beta_3 ...

> > You might try using WinPcap 3.0 instead. I am told the beta version of
> > WinPcap doesn't always work with Ethereal.

> Ethereal 10.6 could not be started on my computer, but 10.4 works fine.

I suggested falling back to WinPcap 3.0 from WinPcap 3.1 beta 3. I said
nothing about running a higher version of Ethereal. FWIW, I can't run
Ethereal 0.10.6 either. My next lowest version, 0.10.5a also won't run. I
missed a couple of steps, and the latest working version I have is 0.10.0. I
will have to see if I can find 0.10.4 somewhere.

> Perhaps, I now understand the problem which was the reason of my
> posting: Ethereal obviously does not support software interfaces like
> ISDN adapters?

I don't know; I don't have one. It is choking when I try to run it on the
Ethernet adapter.

Signature

Norman
~Win dain a lotica, En vai tu ri, Si lo ta
~Fin dein a loluca, En dragu a sei lain
~Vi fa-ru les shutai am, En riga-lint

Reply to this Message

N. Miller - 24 Aug 2004 04:57 GMT

> Perhaps, I now understand the problem which was the reason of my
> posting: Ethereal obviously does not support software interfaces like
> ISDN adapters?

Just checking the site, found the later versions than I have between 0.10.0
and 0.10.5a. I also checked the FAQ, and found a question that applies to
your question about ISDN adapters:

http://www.ethereal.com/faq.html#q3.1

"# WinPcap 3.0 doesn't support PPP WAN interfaces, and WinPcap 2.3 doesn't
support PPP WAN interfaces on Windows NT/2000/XP/Server, so Ethereal cannot
capture packets on those devices with WinPcap 3.0, or with WInPcap 2.x when
running on Windows NT/2000/XP/Server. Regular dial-up lines, ISDN lines, and
various other lines such as T1/E1 lines are all PPP interfaces. This may
cause the interface not to show up on the list of interfaces in the "Capture
Options" dialog."

It looks like you will need to use WinPcap 2.1, or WinPcap 2.2.

Signature

Norman
~Win dain a lotica, En vai tu ri, Si lo ta
~Fin dein a loluca, En dragu a sei lain
~Vi fa-ru les shutai am, En riga-lint

Reply to this Message

Roland =?iso-8859-1?Q?K=FCnzel?= - 28 Aug 2004 07:20 GMT

> ... Regular dial-up lines, ISDN lines, and
> various other lines such as T1/E1 lines are all PPP interfaces. This may
> cause the interface not to show up on the list of interfaces in the "Capture
> Options" dialog."

It looks up; however, if the option with the ISDN adaptor is selected,
no recording takes place. Only for this reason, I am now routing the
traffic for the ISDN adaptor via a software router over a local
Ethernet.

I would prefer not having to employ the local Ethernet and having all
done on the one computer having access to the Internet via the ISDN
adaptor.

Is there anybody who knows how Ethereal really works? At which
interfaces takes the measurement place which Ethereal performs? Is this
an API function of the operating system, or what?

With other words, are there any configurations where Ethereal
facilitates a measurement on a PC without having any network card
installed on the PC?

Roland

Reply to this Message