[Winpcap-users] Bogus IP Header

[Gordon Graham]

I'm happy to report that I now have Ethereal/Winpcap working properly. I'm 
embarassed to report that it was user error. Although I thought I had 
properly turned off the McAfee firewall, it turns out that I hadn't (I had 
selected "Allow All" thinking this disabled the firewall but there's a 
seperate way to actually turn it off, which I hadn't done). Once I corrected 
that, everything was fine.

Thanks so much to everyone for responding and helping. Sorry for posting a 
problem that was my own fault.

Thanks!
Gordon

>From: "Gordon Graham" <gcgraham33 at hotmail.com>
>Reply-To: winpcap-users at winpcap.org
>To: winpcap-users at winpcap.org
>Subject: [Winpcap-users] Bogus IP Header Date: Fri, 17 Jun 2005 23:05:42 
>-0700
>
>I just installed Ethereal and WinPcap (ver 3.0) today and am having trouble 
>capturing packets properly. I am able to capture a series of packets but 
>almost every one says "Bogus IP length 0 ..." or Bogus IP header ...".
>
>In the packet details area of Ethereal the Frame information says something 
>like (1514 bytes on wire, 28 bytes captured). Different frames have a 
>different number of "bytes on the wire" but all seem to say 28 bytes 
>captured. I've tried promiscuous mode and not promiscuous mode with the 
>same results. Otherwise, I'm using all the default values.
>
>I'm running on a Windows ME laptop using the integrated 8255 fast ethernet 
>controller and I'm connected to a NetGear router (home setup). I run the 
>McAfee personal firewall but turned it off. I also have a docking station 
>with a different Ethernet interface. I tried capturing from that interface 
>with the same results.
>
>I posted this question on the Ethereal list. They suggested that it might 
>be an issue with WinPcap and suggested I try here.
>
>Does anyone have an idea about what I might be doing wrong and how I can 
>correct things?
>
>Any help would be greatly appreciated!
>
>Thanks!
>Gordon
>
>
>_______________________________________________
>Winpcap-users mailing list
>Winpcap-users at winpcap.org
>https://www.winpcap.org/mailman/listinfo/winpcap-users