Support |
| |
|
|
|
How-to articles
FAQ
- I can not run URL Helper, Why?
Please open "control panel -> add/delete
program", check the winpcap, if you have not
installed winpcap, please install.
- What is Winpcap?
WinPcap is an open source library for packet
capture and network analysis for the Win32 platforms.
It includes a kernel-level packet filter, a low-level
dynamic link library (packet.dll), and a high-level
and system-independent library (wpcap.dll, based on
libpcap version 0.6.2).
More detail, please visit: http://www.winpcap.org/
- Which network adapters are supported by
WinPcap?
The WinPcap device driver was developed to work primarily
with Ethernet (10/100/1000) adapters. Support for
other MACs was added during the development, but Ethernet
remains the most tested one. A pretty complete list
of supported adapters is maintained by the AirSnare
team at http://www.micro-logix.com/WinPcap/Supported.asp,
you are encouraged to use that page to report the
results of your experiences with WinPcap. REMEMBER
that this list is created by WinPcap Users, so it
cannot be considered official or 100% reliable.
The overall situation is:
-
* Windows 95/98/ME:
the packet driver works ok on Ethernet networks. It
works also on PPP WAN links, but with some limitations
(for example it is not able to capture the LCP and
NCP packets). FDDI, ARCNET, ATM and Token Ring should
be supported, however we did not test them because
we do not have the hardware.
* Windows NT4/2000/XP/2003/Vista:
the packet driver works ok on Ethernet networks. As
for dial-up adapters and VPN connections, read Q5
and Q6. As in Win9x, FDDI, ARCNET, ATM and Token Ring
are supported, but not tested by us.
* Wireless adapters: these adapters
may present problems, because they are not properly
supported by the Windows Kernel. Some of them are
not detected, other don't support promiscuous mode.
In the best case, WinPcap is able to see an Ethernet
emulation and not the real transiting packets: this
means that the 802.11 frames are transformed into
fake Ethernet frames before being captured, and that
control frames are not received. Again, refer to the
http://www.micro-logix.com/WinPcap/Supported.asp
to discover if your adapter works. If it doesn't,
you can use the
trick explained in this video to capture its
traffic.
For real wireless capture, CACE Technologies
offers the AirPcap
adapter, specifically designed to sniff 802.11
traffic, including control frames, management frames
and power information. AirPcap at this time is the
only solution for capturing raw 802.11 traffic with
WinPcap. More details can be found on the AirPcap
product page.
|
