<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=text/html;charset=utf-8 http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.7600.16588"></HEAD>
<BODY style="PADDING-LEFT: 10px; PADDING-RIGHT: 10px; PADDING-TOP: 15px"
id=MailContainerBody leftMargin=0 topMargin=0 bgColor=#ffffff
CanvasTabStop="true" name="Compose message area">
<DIV><FONT face=Calibri>I would definitely avoid using an old version of WinPcap
(like 3.0alpha2). A huge number of bugs have been fixed since that release,
including critical bugs in the driver that could cause OS crashes.</FONT></DIV>
<DIV><FONT face=Calibri></FONT> </DIV>
<DIV><FONT face=Calibri>Have a nice day</FONT></DIV>
<DIV><FONT face=Calibri>GV</FONT></DIV>
<DIV style="FONT: 10pt Tahoma">
<DIV><BR></DIV>
<DIV style="BACKGROUND: #f5f5f5">
<DIV style="font-color: black"><B>From:</B> <A title=lyulou@gmail.com
href="mailto:lyulou@gmail.com">yulou liu</A> </DIV>
<DIV><B>Sent:</B> Thursday, August 05, 2010 7:22 PM</DIV>
<DIV><B>To:</B> <A title=winpcap-users@winpcap.org
href="mailto:winpcap-users@winpcap.org">winpcap-users@winpcap.org</A> </DIV>
<DIV><B>Subject:</B> Re: [Winpcap-users] does the winpcap version 4.1.2 support
thekernelDump feature?</DIV></DIV></DIV>
<DIV><BR></DIV>
<DIV><SPAN
style="FONT-SIZE: 15px; -webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469)"
class=Apple-style-span><BR><FONT size=2 face=宋体> </FONT> <BR><FONT
size=2 face=宋体>thanks a lot. </FONT><BR><FONT size=2
face=宋体> </FONT> <BR><FONT size=2 face=宋体>I have another
question. </FONT><BR><FONT size=2 face=宋体>Is there any possible that I
could use the live_dump feature if I install the older version of winpcap
?</FONT> <BR><FONT size=2 face=宋体> </FONT> <BR><FONT size=2
face=宋体>the following was what I just tried this morning:</FONT> <BR><FONT
size=2 face=宋体> </FONT> <BR><FONT size=2 face=宋体>1. install the
3.0alpha2-WinPcap.exe </FONT><BR><FONT size=2
face=Calibri>2. download the "</FONT><FONT size=2
face=宋体>3.0beta-wpdpack.zip</FONT><FONT size=2 face=Calibri>" file
and unzip , and config VC6 to refer to the lib , include's
directions .</FONT> <BR><FONT size=2
face=Calibri> </FONT> <BR><FONT size=2 face=Calibri>Compile the
project which uses pcap_live_dump(). It was successully
compiled . </FONT><BR><FONT size=2 face=Calibri>But when I run the .exe
file , it can't find the netcard interfaces. </FONT><BR><FONT size=2
face=Calibri> </FONT> <BR><FONT size=2 face=Calibri>Please tell
me what mistakes did I make ? </FONT><BR><FONT size=2
face=宋体> </FONT> <BR><FONT size=2 face=Calibri>Thank
you. </FONT><BR><FONT size=2 face=sans-serif><BR><BR></FONT></SPAN>在
2010-8-6，0:45，Gianluca Varenni <<A
href="mailto:gianluca.varenni@cacetech.com">gianluca.varenni@cacetech.com</A>>
写到：<BR><BR></DIV>
<DIV></DIV>
<BLOCKQUOTE type="cite">
<DIV>
<DIV><FONT face=Calibri>The live_dump feature has been disabled several years
ago (because of other changes in the driver) and no one has worked to support
it again. At the moment in order to dump to disk you need to use the standard
dump-to-disk mechanism shown in sample "savedump" in the WinPcap developer's
pack.</FONT></DIV>
<DIV><FONT face=Calibri></FONT> </DIV>
<DIV><FONT face=Calibri>Have a nice day.</FONT></DIV>
<DIV style="FONT: 10pt Tahoma">
<DIV><BR></DIV>
<DIV style="BACKGROUND: #f5f5f5">
<DIV style="font-color: black"><B>From:</B> <A title=lyulou@gmail.com
href="mailto:lyulou@gmail.com">yulou liu</A> </DIV>
<DIV><B>Sent:</B> Thursday, August 05, 2010 9:32 AM</DIV>
<DIV><B>To:</B> <A title=winpcap-users@winpcap.org
href="mailto:winpcap-users@winpcap.org"><A
href="mailto:winpcap-users@winpcap.org">winpcap-users@winpcap.org</A></A>
</DIV>
<DIV><B>Subject:</B> [Winpcap-users] does the winpcap version 4.1.2 support
the kernelDump feature?</DIV></DIV></DIV>
<DIV><BR></DIV>
<DIV>I'm working on a project , that I want to dump packets to the disk
.</DIV>
<DIV>I think the pcap_live_dump() maybe could work in the way I
want.</DIV>
<DIV>but it seems the pcap_live_dump() is not supported in the new version of
winpcap.</DIV>
<DIV>is it true ??</DIV>
<DIV> </DIV>
<DIV>thank you.</DIV>
<P></P>
<HR>
<P></P>_______________________________________________<BR>Winpcap-users
mailing list<BR><A href="mailto:Winpcap-users@winpcap.org"><A
href="mailto:Winpcap-users@winpcap.org">Winpcap-users@winpcap.org</A></A><BR><A
href="https://www.winpcap.org/mailman/listinfo/winpcap-users"><A
href="https://www.winpcap.org/mailman/listinfo/winpcap-users">https://www.winpcap.org/mailman/listinfo/winpcap-users</A></A><BR></DIV></BLOCKQUOTE>
<BLOCKQUOTE type="cite">
<DIV><SPAN>_______________________________________________</SPAN><BR><SPAN>Winpcap-users
mailing list</SPAN><BR><SPAN><A
href="mailto:Winpcap-users@winpcap.org">Winpcap-users@winpcap.org</A></SPAN><BR><SPAN><A
href="https://www.winpcap.org/mailman/listinfo/winpcap-users">https://www.winpcap.org/mailman/listinfo/winpcap-users</A></SPAN><BR></DIV></BLOCKQUOTE>
<P>
<HR>
<P></P>_______________________________________________<BR>Winpcap-users mailing
list<BR>Winpcap-users@winpcap.org<BR>https://www.winpcap.org/mailman/listinfo/winpcap-users<BR></BODY></HTML>