Re: [Ethereal-users] Tracing PPP on Windows 2K

[Guy Harris <guy@xxxxxxxxxx>]

On Wed, Jul 10, 2002 at 07:24:53AM -0700, Stuart Burgess wrote:
> I'm running Windows 2000 and per "FAQ 5.11", I'm having a problem tracing a
> Web session over PPP, i.e. I can see the interface (with TCPdump, the
> capture seems to see packets across the line)

tcpdump, or WinDump?  (I.e., when you see packets, are you running
Windows or some flavor of UNIX?)

> but I cannot seem to capture
> and complete the HTTP dialogue. My session timeout, server failure in the
> TCP packages captured .. as if Ethereal is monopilizing the dialogue. On the
> Ethernet side, this is fine, it's the PPP dialogue I can't get working. 

So what happens if you run WinDump, with flags "-s 65535" and "-w file.cap"
(to cause WinDump to write the capture to a file "file.cap")?

Do you see the same problems while the capture is in progress?

What happens if you then read "file.cap" with Ethereal?  Does the
capture show the problems?