WinPCAP

Anyone out there no of a PCAP that will work on 7??

I've just downloaded WinPcap 4.1 beta5 from here: WinPcap, the Packet Capture and Network Monitoring Library for Windows

Set the compatibility mode to Windows Vista (right click on the installer executable then select Properties; on the Compatibility tab, check "Run this program in compatibility mode for", select Windows Vista SP1 from the dropdown list, then finally click OK =)) and it will install as it should.

For me it worked flawlessly so far.

Thank you! Worked perfectly!

Dude I did this, it installed fine, but when I try to run wireshark it tells me that the NPF driver isnt loaded, so then I tried "net start npf" after some googling and it says something about system error 5 has occurred "access denied"

meh

digitsix said:

Dude I did this, it installed fine, but when I try to run wireshark it tells me that the NPF driver isnt loaded, so then I tried "net start npf" after some googling and it says something about system error 5 has occurred "access denied"

meh

Run Wireshark as an admin (right-click the WS shortcut, select "run as admin").

thank you! worked like a charm!!!

LOL though on a side note, the problem I was trying to trouble shoot doesnt happen when im capturing packets, go figure!#$#$%$@)(*@#(&%

digitsix said:

thank you! worked like a charm!!!

LOL though on a side note, the problem I was trying to trouble shoot doesnt happen when im capturing packets, go figure!#$#$%$@)(*@#(&%

Do you mean the act of capturing literally makes the symptom go away? That would make it interesting. What's the symptom?

I run this software called notepad++ to do all my code editing in, and I use the FTP_synchronize plugin to work with remote files. On this computer and this computer only, (and it does work fine on my other win7 machines (i have 3)), it only downloads partial files yet reports success, it also cannot fully download large directory lists. Its very strange...

Anyway, the packet capture fix seemed to be a fluke because its back to doing it again, even if the packets are being captured. I still havent figured out what the problem is though

digitsix said:

I run this software called notepad++ to do all my code editing in, and I use the FTP_synchronize plugin to work with remote files. On this computer and this computer only, (and it does work fine on my other win7 machines (i have 3)), it only downloads partial files yet reports success, it also cannot fully download large directory lists. Its very strange...

Anyway, the packet capture fix seemed to be a fluke because its back to doing it again, even if the packets are being captured. I still havent figured out what the problem is though

You really don't want to be in a situation where capturing packets completely alters the outcome. Those can be very nasty problems to understand :)

Given you can now repro while capturing, what does the capture tell you? Can you see which side is truncating the large directory lists, and similar?

If you can't get any answers from the trace, try doing all this in [safe mode + net]. If that works, the most likely culprit is an anti-virus or firewall driver which is buggy. The reason you don't see its activities in the trace is because it occupies the same "NDIS intermediate" level as the packet sniffer driver - WinPCap in this case.

Depending on what you are using it for, it would be easier to install Linux. You can dual boot 7 and Fedora 11. That is how I have mine set up. Linux is far superior to windows when using programs like this. I can give you a few sites that explain the process in linux if you want.

I hope I don't piss anyone off by suggesting Linux, but it is a lot easier to do certain functions in Linux than windows. And it's free.