[Winpcap-users] Windump problem - I don't see ANYTHING

[jedimaster024-windump at yahoo.com]

OK, maybe I've been going about this the wrong way... instead of asking if the
wireless cards I have will work with windump/winpcap, maybe I should be asking
the question the other way around:

If I want to packet sniff--IN PROMISCUOUS MODE--is there any card that I can
buy that is definitely supported?  If so, tell me what it is!  

... or do I have to take the plunge (back) into Linux to do packet sniffing??



--- Gianluca Varenni <gianluca.varenni at cacetech.com> wrote:

> Just a quick addendum to the wireless problem: it's not only a matter of 
> (un)supported network cards (being them wireless or wired). It's also a 
> matter of network card drivers. Some cards are supported (and by supported I 
> mean that they work in promiscuous mode) with any version of their drivers, 
> some others work only with some particular versions of their drivers (and 
> maybe on some Windows flavors, only).
> 
> Back to your problem, I would try to capture in non-promiscuous mode 
> ("windump -p") and see what happens. If you capture packets, your wireless 
> network card probably does not work in promiscuous mode...
> 
> Have a nice day
> GV
> 
> ----- Original Message ----- 
> From: <jedimaster024-windump at yahoo.com>
> To: "Loris Degioanni" <loris.degioanni at gmail.com>; 
> <jedimaster024-windump at yahoo.com>; <winpcap-users at winpcap.org>
> Sent: Sunday, February 26, 2006 4:15 PM
> Subject: Re: [Winpcap-users] Windump problem - I don't see ANYTHING
> 
> 
> 
> I thought I had looked and determined that my card was one of the supported
> ones, but now I'm not so certain.  I guess there's lots of Orinoco cards out
> there (?)
> 
> In response to your question, here is the output of windump -D on a 
> Windows2K
> box with my Orinoco plugged in.
> (The Win2K is a very old box, I am using this now but usually don't use it 
> when
> I try to packet sniff; if the windump -D output would be different if I did 
> it
> under XP with the same card plugged in?)
> 
> c:> WinDump -D
> 1.\Device\NPF_GenericDialupAdapter (Generic dialup adapter)
> 2.\Device\NPF_{57B30D02-EED3-49AD-A49F-7C443C3B6661} (ORiNOCO 802.11bg
> ComboCard Gold)
> 3.\Device\NPF_{282E40F1-2EBB-4A62-BA38-2A3CDCEB7ACA} (Intel(R) PRO Adapter)
> 
> I have another card that is usable, when I plug that one in also, the 
> windump
> -D output is (also on the Win2K box...)
> c:\> windump -D
> 1.\Device\NPF_GenericDialupAdapter (Generic dialup adapter)
> 2.\Device\NPF_{26E4D579-E36A-49C1-903C-BABB091585CC} (IEEE 802.11 Wireless
> LAN/PC Card(5V))
> 3.\Device\NPF_{57B30D02-EED3-49AD-A49F-7C443C3B6661} (ORiNOCO 802.11bg
> ComboCard Gold)
> 4.\Device\NPF_{282E40F1-2EBB-4A62-BA38-2A3CDCEB7ACA} (Intel(R) PRO Adapter)
> 
> Can you tell the make/model/specifics of the card from this?
> I was given the card as an add-on to another purchase, it doesn't have the
> external antenna connector that the orinoco does, but if it's usable, by all
> means I'll use it instead.
> 
> I hope you're right and I was just using an unsupported card. (?)
> 
> Mark
> 
> 
> --- Loris Degioanni <loris.degioanni at gmail.com> wrote:
> 
> > Can you tell us the command line you are using, and the output of
> > "Windump -D" (with capital D)?
> >
> > Loris
> >
> >
> > jedimaster024-windump at yahoo.com wrote:
> > > I don't see this addressed in the FAQ and couldn't find anything about 
> > > it
> > > already posted.
> > >
> > > I installed the most recent versions of Windump and libpcap on Windows 
> > > XP.
> >
> > > However, when I try to sniff packets, Windump doesn't "see"/capture any.
> > > When I stop WinDump, it says 0 packets ___, 0 packets ____, 0 packets 
> > > ___.
> >
> > >
> > > This behavior is stable regardless of which network interface card I use
> > > (I've tried it on three), when there is no encryption on my WLAN, and
> > across
> > > laptops.  I just don't see anything... even though I know traffic is 
> > > flying
> > > across the net... (on an unencrypted WLAN...)
> > >
> > > Do you know what the problem could be?  My builtin card is an Aethros 
> > > and
> > > I've tried to get it to work with a Proxim Orinoco gold and others.  I
> > thought I saw that these were supported.
> > >
> > > What am I missing?  Any suggestions would be appreciated.
> > >
> > > Thanks,
> > >
> > > Mark