[Winpcap-users] Capture fails in pppoe enviroment

[Kyle Brotheridge]

Lesher,

Please explain a bit more. From my understanding you have a PC connected to a LAN, and a PPPoE connection terminating on the same PC via its local NIC.

You CAN capture LAN traffic, but CANNOT capture traffic from the PPPoE connection?

From this I’d say it’s because the packets from the PPPoE are encapsulated in PPP/GRE, if you’re looking to capture the packets contained within the PPP stream, you’ll have to capture on the PPP Interface that the PPPoE terminates on.

-KB

From: winpcap-users-bounces at winpcap.org [mailto:winpcap-users-bounces at winpcap.org] On Behalf Of ceo at triplebit.com
Sent: Saturday, 29 May 2010 7:21 PM
To: winpcap-users at winpcap.org
Subject: [Winpcap-users] Capture fails in pppoe enviroment

Hi all,
I use WinPcap 4.02 to capture stream source and to process the data somehow.
It works fine if the source is inside a LAN.
On the other hand, when source is in a pppoe Internet connection, I capture the Ethernet card that supports the Internet connection and I get no packet captured.  The following while loop simply never enters the loop as it does in a LAN environment.

while((res = pcap_next_ex( adhandle, &header, &pkt_data)) >= 0)

{

if(res == 0)

/* Timeout elapsed */

continue;
However in a Wireshark I can definitely see the expected packets om this same card.
The algorithm is similar in both environments and it based on the samples following the product.
Has anyone any idea what could be the cause?
Regards
I. Lesher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20100531/b2b1f701/attachment.htm