<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns:o = "urn:schemas-microsoft-com:office:office"><HEAD>
<META content=text/html;charset=utf-8 http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.7600.16535">
<STYLE></STYLE>
</HEAD>
<BODY style="PADDING-LEFT: 10px; PADDING-RIGHT: 10px; PADDING-TOP: 15px"
id=MailContainerBody leftMargin=0 topMargin=0 bgColor=#ffffff
CanvasTabStop="true" name="Compose message area">
<DIV><FONT face=Calibri>Are you using a capture filter?</FONT></DIV>
<DIV><FONT face=Calibri></FONT> </DIV>
<DIV><FONT face=Calibri>Have a nice day</FONT></DIV>
<DIV><FONT face=Calibri>GV</FONT></DIV>
<DIV style="FONT: 10pt Tahoma">
<DIV><BR></DIV>
<DIV style="BACKGROUND: #f5f5f5">
<DIV style="font-color: black"><B>From:</B> <A title=ceo@triplebit.com
href="mailto:ceo@triplebit.com">ceo@triplebit.com</A> </DIV>
<DIV><B>Sent:</B> Saturday, May 29, 2010 2:21 AM</DIV>
<DIV><B>To:</B> <A title=winpcap-users@winpcap.org
href="mailto:winpcap-users@winpcap.org">winpcap-users@winpcap.org</A> </DIV>
<DIV><B>Subject:</B> [Winpcap-users] Capture fails in pppoe
enviroment</DIV></DIV></DIV>
<DIV><BR></DIV>
<DIV><FONT size=2 face=Arial>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><SPAN
style="FONT-FAMILY: Arial; FONT-SIZE: 10pt">Hi all,</SPAN><o:p></o:p></P>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><SPAN
style="FONT-FAMILY: Arial; FONT-SIZE: 10pt">I use WinPcap 4.02 to capture stream
source and to process the data somehow.</SPAN><o:p></o:p></P>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><SPAN
style="FONT-FAMILY: Arial; FONT-SIZE: 10pt">It works fine if the source is
inside a LAN.</SPAN><o:p></o:p></P>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><SPAN
style="FONT-FAMILY: Arial; FONT-SIZE: 10pt">On the other hand, when source is in
a pppoe Internet connection, I capture the Ethernet card that supports the
Internet connection and I get no packet captured. The following while loop
simply never enters the loop as it does in a LAN
environment.<o:p></o:p></SPAN></P>
<P><SPAN
style="FONT-FAMILY: Arial; COLOR: blue; FONT-SIZE: 10pt">while</SPAN><SPAN
style="FONT-FAMILY: Arial; FONT-SIZE: 10pt">((res = pcap_next_ex( adhandle,
&header, &pkt_data)) >= 0)<o:p></o:p></SPAN></P>
<P><SPAN style="FONT-FAMILY: Arial; FONT-SIZE: 10pt">{<o:p></o:p></SPAN></P>
<P><SPAN style="FONT-FAMILY: Arial; COLOR: blue; FONT-SIZE: 10pt">if</SPAN><SPAN
style="FONT-FAMILY: Arial; FONT-SIZE: 10pt">(res == 0)<o:p></o:p></SPAN></P>
<P><SPAN style="FONT-FAMILY: Arial; COLOR: green; FONT-SIZE: 10pt">/* Timeout
elapsed */<o:p></o:p></SPAN></P>
<P><SPAN
style="FONT-FAMILY: Arial; COLOR: blue; FONT-SIZE: 10pt">continue</SPAN><SPAN
style="FONT-FAMILY: Arial; FONT-SIZE: 10pt">;<o:p></o:p></SPAN></P>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><SPAN
style="FONT-FAMILY: Arial; FONT-SIZE: 10pt">However in a Wireshark I can
definitely see the expected packets om this same card.</SPAN><o:p></o:p></P>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><SPAN
style="FONT-FAMILY: Arial; FONT-SIZE: 10pt">The algorithm is similar in both
environments and it based on the samples following the
product.</SPAN><o:p></o:p></P>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><SPAN
style="FONT-FAMILY: Arial; FONT-SIZE: 10pt">Has anyone any idea what could be
the cause?</SPAN><o:p></o:p></P>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><SPAN
style="FONT-FAMILY: Arial; FONT-SIZE: 10pt">Regards</SPAN><o:p></o:p></P>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><SPAN
style="FONT-FAMILY: Arial; FONT-SIZE: 10pt">I.
Lesher</SPAN><o:p></o:p></P></FONT></DIV>
<P>
<HR>
<P></P>_______________________________________________<BR>Winpcap-users mailing
list<BR>Winpcap-users@winpcap.org<BR>https://www.winpcap.org/mailman/listinfo/winpcap-users<BR></BODY></HTML>