<div dir="ltr">Hi Gisle,<div><br></div><div style>The outputs are as below:</div><div style><br></div><div style><div>C:\Program Files\Wireshark>dumpcap -D</div><div>1. \Device\NPF_{4D98F9E6-1671-48AE-BEC7-0B69819C55ED} (Microsoft)</div>
<div>2. \Device\NPF_{B7AA410C-0172-4960-A503-A468B0520621} (Intel(R) 82567LM Gigabit</div><div>Network Connection)</div><div>3. \Device\NPF_{BB31B551-FA05-46E9-85BD-EECC3E6A8D2B} (Fortinet Virtual NIC)</div><div>4. \Device\NPF_{50C6054D-F4F8-45D0-BA23-22C861A69DED} (NCP Secure Client Virtual</div>
<div> NDIS6 Adapter)</div><div>5. \Device\NPF_{F6945C05-3F7B-49F3-B298-4A08250BDE86} (Juniper Network Connect V</div><div>irtual Adapter)</div><div>6. \Device\NPF_{130984C3-C857-4E00-A133-DB36838B7CB8} (Microsoft)</div><div>
<br></div><div><br></div><div style>When FortiClient is connected ipconfig result is as below:</div><div><br></div><div><br></div><div><div>PPP adapter fortissl:</div><div><br></div><div> Connection-specific DNS Suffix . :</div>
<div> Description . . . . . . . . . . . : fortissl</div><div> Physical Address. . . . . . . . . :</div><div> DHCP Enabled. . . . . . . . . . . : No</div><div> Autoconfiguration Enabled . . . . : Yes</div><div> IPv4 Address. . . . . . . . . . . : 192.168.242.1(Preferred)</div>
<div> Subnet Mask . . . . . . . . . . . : 255.255.255.255</div><div> Default Gateway . . . . . . . . . :</div><div> DNS Servers . . . . . . . . . . . : 10.160.0.13</div><div> 138.203.68.208</div>
<div> NetBIOS over Tcpip. . . . . . . . : Enabled</div><div><br></div><div><br></div></div><div><br></div><div><br></div><div style>I realized that I have another connection which is always seem like below:</div><div><br>
</div><div><br></div><div>C:\Program Files\Wireshark>ipconfig /all</div><div><br></div><div>Windows IP Configuration</div><div><br></div><div>....</div><div><br></div><div>Ethernet adapter Local Area Connection 3:</div>
<div><br></div><div> Media State . . . . . . . . . . . : Media disconnected</div><div> Connection-specific DNS Suffix . :</div><div> Description . . . . . . . . . . . : Fortinet virtual adapter</div><div> Physical Address. . . . . . . . . : 00-09-0F-FE-00-01</div>
<div> DHCP Enabled. . . . . . . . . . . : Yes</div><div> Autoconfiguration Enabled . . . . : Yes</div><div><br></div><div> .....</div><div><br></div><div><br></div><div><br></div><div style>What should I check here? Do you have any comments?</div>
</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Apr 3, 2013 at 3:34 PM, Gisle Vanem <span dir="ltr"><<a href="mailto:gvanem@broadpark.no" target="_blank">gvanem@broadpark.no</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">"Ulas Yuce" <<a href="mailto:ulasyuce@gmail.com" target="_blank">ulasyuce@gmail.com</a>> wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I have a Windows 7 PC running wireshark. I connect to another network using<br>
Fortinet FortiClient. FortiClient create a PPP interface and connect me to<br>
other networks? I need to capture the traffic going through this interface.<br>
<br>
I can see the Forticlient interface on the interfaces list but the IP is<br>
0.0.0.0 and I do not see any packets flowing on this interface.<br>
<br>
Do anybody knows how can I fix this problem and capture FortiClient<br>
interface?<br>
</blockquote>
<br></div>
What does "dumpcap -D" prints?<br>
Or for that matters, what does "windump -D" prints?<br>
(if you have that).<br>
<br>
Compare that with what adapters "ipconfig /all" prints.<br>
Check the description of each adapter. It could be that wpcap.dll is not built for your situation. I.e. I'm not sure it needs to be built with '-DHAVE_WANPACKET_API' to sniff<br>
the interface in question.<br>
<br>
--gv<br>
______________________________<u></u>_________________<br>
Winpcap-users mailing list<br>
<a href="mailto:Winpcap-users@winpcap.org" target="_blank">Winpcap-users@winpcap.org</a><br>
<a href="https://www.winpcap.org/mailman/listinfo/winpcap-users" target="_blank">https://www.winpcap.org/<u></u>mailman/listinfo/winpcap-users</a><br>
</blockquote></div><br></div>