Wireshark · Ethereal-users: [Ethereal-users] Re: Ethereal & ZoneAlarm Pro Firewall Interfere!

["Claude Chauveau" <cjc@xxxxxxxxxxx>]

Hi all,

The problem was caused by a software firewall, Zone Alarm Pro, which was
also installed on the Win98 machine.  Apparently, the layered service
provider (LSP) for the firewall was interfering with the NPF capture driver.
When I switched off the firewall, Ethereal was able to capture network
traffic just fine.

I have verified that this problem also occurs on all Windows machines
(Win98, Win2000, WinXP, etc.) that have ZoneAlarm Pro installed. Perhaps
this would be useful to post under your FAQ's.

Thanks,

___________________
Claude Chauveau
cjc@xxxxxxxxxxx


-----Original Message-----
From: Claude Chauveau [mailto:cjc@xxxxxxxxxxx]
Sent: Sunday, May 01, 2005 1:54 AM
To: ethereal-users@xxxxxxxxxxxx
Subject: Ethereal & Win98SE


Hi all,

I installed Ethereal V 0.10.10 and WinPCap 3.0 on a Windows 98SE machine
with a standard 3COM 100/10 NIC, which I regularly use to run SnifferPro
V3.0.  It appears that Ethereal/WinPCap is not able to force the NIC into
promiscuous mode when capturing, as I only see ARP's and broadcast messages.

Has anyone else encountered this kind of issue when using a Win98SE machine,
and if so, does anyone know the fix for this?

Thanks much!

___________________
Claude Chauveau
cjc@xxxxxxxxxxx