• Welcome to Valhalla Legends Archive.
 

Ethereal Help

Started by Decimal., August 23, 2003, 08:10 PM

Previous topic - Next topic

Decimal.

I wasn't sure where to put this but anyways earlier today I installed Ethereal 0.9.14 (Also WinPcap) and when I try to Capture packets it gives me this messege:

The capture session could not be initiated (Error opening adapter: The system cannot find the file specified.)

Note that the driver Ethereal uses for packet capture on Windows doesn't support capturing on PPP/WAN interfaces in Windows NT/2000/XP/.NEt
Server.

Please help.

I have Windows 2000.

Yoni

I'm assuming you're using something other than an Ethernet card to connect to the Internet (i.e., a 56kbps modem, a USB modem, something else...).

I haven't tested Ethereal on non-Ethernet devices... That could be the reason, or it could not be.

Describe your Internet connection style, and more info if any?

iago

My friend, who uses a 56k modem, gets the same error.. I', guessing it doesn't support non-ethernet connections.  There might be a way to bridge it to look like an ethernet connection, but I'm not really sure how to do that, but I do know that a bridged connection shows up as a seperate ethernet connection.
This'll make an interesting test for broken AV:
QuoteX5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*


Crisis

While we're on the topic.. does anybody know of a decent packet logger for 56k on Windows and where I could find it at?

iago

#4
You can try winsock packet editor.. you can get it from www.fly.to/mtc

[edit] watch out, though, the guy who made that site is french, so he can't be trusted ;-)
This'll make an interesting test for broken AV:
QuoteX5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*


Decimal.

I do use a 56k Modem so that most likely is the problem. I'll try that winsock packet editor. Thanks for your help.

By the way if you're dying to know who is my ISP, it's NetZero :-[. Hey atleast it isn't AOL :).

Skywing

Quote from: Decimal. on August 23, 2003, 08:10 PM
I wasn't sure where to put this but anyways earlier today I installed Ethereal 0.9.14 (Also WinPcap) and when I try to Capture packets it gives me this messege:

The capture session could not be initiated (Error opening adapter: The system cannot find the file specified.)

Note that the driver Ethereal uses for packet capture on Windows doesn't support capturing on PPP/WAN interfaces in Windows NT/2000/XP/.NEt
Server.

Please help.

I have Windows 2000.
Do you have administrative privileges?  Ethereal works by installing a kernel mode driver, which cannot be done from a limited user.

Yoni

When I used a 56kbps modem, my favorite packet logger was NetXRay. It's difficult to "find" but it was nice.

Skywing

Quote from: Yoni on August 24, 2003, 10:55 AM
When I used a 56kbps modem, my favorite packet logger was NetXRay. It's difficult to "find" but it was nice.
Supposedly NetXRay became what is now NetMon in 2000/XP/2003.

Decimal.

Yes I do have administrative privileges and I'll try to find NetMon. If anyone else finds the link to NetMon please post or PM me.

Skywing

Quote from: Decimal. on August 24, 2003, 07:37 PM
Yes I do have administrative privileges and I'll try to find NetMon. If anyone else finds the link to NetMon please post or PM me.
Add/Remove Programs: Windows Components.

Note that (IIRC) NetMon isn't included on the workstation edition CDs (e.g. Windows 2000 Professional).  You should, however, have no difficulty installing it anyway from another source.

Grok

Quote from: Skywing on August 24, 2003, 02:49 PM
Quote from: Yoni on August 24, 2003, 10:55 AM
When I used a 56kbps modem, my favorite packet logger was NetXRay. It's difficult to "find" but it was nice.
Supposedly NetXRay became what is now NetMon in 2000/XP/2003.

Round-about.  NetXRay became Sniffer Pro, which was then licensed (or bought? I dont know) by Microsoft and Sniffer Pro became NetMon.

At least it is a nearly identical twin.

Adron

I can't believe that... NetXRay was great, and netmon ... sucks!

How can Microsoft take something so good and turn it into something so bad?

iago

* iago points to Fasa Interactive, bought by microsoft :(
This'll make an interesting test for broken AV:
QuoteX5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*


Adron