<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns:o = "urn:schemas-microsoft-com:office:office"><HEAD>
<META http-equiv=Content-Type content="text/html; charset=utf-8">
<STYLE>BODY {
FONT-SIZE: 12px; FONT-FAMILY: Arial, Helvetica, sans-serif
}
</STYLE>
<META content="MSHTML 6.00.2900.5726" name=GENERATOR></HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face="Courier New" size=2>Does the same problem happen with WinPcap
4.1beta5?</FONT></DIV>
<DIV><FONT face="Courier New" size=2></FONT> </DIV>
<DIV><FONT face="Courier New" size=2>Can you send me the output of "windump
-D"?</FONT></DIV>
<DIV><FONT face="Courier New" size=2></FONT> </DIV>
<DIV><FONT face="Courier New" size=2>Have a nice day</FONT></DIV>
<DIV><FONT face="Courier New" size=2>GV</FONT></DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=bsalibrici@scidyn.com
href="mailto:bsalibrici@scidyn.com">bsalibrici@scidyn.com</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=winpcap-users@winpcap.org
href="mailto:winpcap-users@winpcap.org">winpcap-users@winpcap.org</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Tuesday, July 21, 2009 6:52
AM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> [Winpcap-users] Access violation
when using pcap_findalldevs_ex</DIV>
<DIV><FONT face="Courier New" size=2></FONT><BR></DIV><BR>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">Hello Everyone,</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">I am using WinXP Professional
SP3 and Microsoft Visual Studio 6.0 with SP5.</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"></SPAN> </P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">I installed Winpcap version
4.0.2.</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> I also got the WpdPack and
compiled your </SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">basic_dump example (in
...\WpdPack\Examples-pcap\basic_dump). The only thing</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">I had to add to the visual c++
project was the IPHlpApi.Lib (6/16/1999 12:44 PM). </SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">When I try to execute the app
out of the debugger, it crashes</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">at the call to pcap_findalldevs.
I verified that the npf driver was running</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">before I ran the app - and it
was. Here is the error:</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">
Unhandled exception in basic_dump.exe (NDISNPP.DLL): 0xC0000005: Access
Violation. </SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">
Call Stack: NDISNPP! 5a704d91()</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">I searched your FAQs and your
winpcap-users mailing list archives for this</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">or similar problem. The only
thing I found was a post back in August 2008</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">where В. Rasta posted a similar
problem. However, I didn't see a response</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">or a resolution??</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">Interestingly enough, I
downloaded windump 3.9.5 and ran it with the -D option. </SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">It listed all my adapters ok,
and I selected an adapter with the -i option and it </SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">captured packets ok. Here are
the results I got for the -h option:</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">
windump version 3.9.5, based on tcpdump version 3.9.5</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">
WinPcap version 4.0.2 (packet.dll version 4.0.0.1040), based on libpcap
version 0.9.5</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">Here is some info for the
NDISNPP.DLL I'm using:</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">File Version:
5.1.2600.5512</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">File Date: 4/13/08 8:12
PM</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">File Size: 57,344
bytes</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">File Location:
C:\WINDOWS\system32\npp</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">Attached is a screen shot of the
debugger display for the crash.</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">Any ideas as to what the problem
is here with the basic_dump example?</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">Perhaps I'm overlooking
something simple.</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">Thanks in advance for any
help.</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">Regards,</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> --Bill
Salibrici</SPAN></P>
<P>
<HR>
<P></P>_______________________________________________<BR>Winpcap-users
mailing
list<BR>Winpcap-users@winpcap.org<BR>https://www.winpcap.org/mailman/listinfo/winpcap-users<BR></BLOCKQUOTE></BODY></HTML>