RE: RE: Ethereal Crashing on WinXP

From: Vijay Mishra (mishravijay_at_qualityg.com)
Date: 08/24/04

  • Next message: Mark Blaszczyk: "Re: interesting wireless card and linux issue"
    To: "'Anish'" <anish@myrealbox.com>, <Benoni.MARTIN@libertis.ga>
    Date: Tue, 24 Aug 2004 09:58:38 -0700
    
    

    Hi,

    But in my case it is crashing after capturing 10-15 packets and I haven’t
    installed the SP2 yet.

    Vijay Mishra

    -----Original Message-----
    From: Anish [mailto:anish@myrealbox.com]
    Sent: Monday, August 23, 2004 11:40 PM
    To: Benoni.MARTIN@libertis.ga
    Cc: mishravijay@qualityg.com; pen-test@securityfocus.com;
    incidents@securityfocus.com
    Subject: Re: RE: Ethereal Crashing on WinXP

    Hi,
     I thought I should mention this ,I had used Ethreal on XP with SP2 beta a
    few weeks back and it was working fine for me .The only time it crashed was
    when I had large capture files, which I had captured using netmon (half a
    gig) filtered,in Ethereal.
    regards
    Anish

    -----Original Message-----
    From: Bénoni MARTIN <Benoni.MARTIN@libertis.ga>
    To: "Vijay Mishra" <mishravijay@qualityg.com>
    Date: Mon, 23 Aug 2004 16:49:29 +0100
    Subject: RE: Ethereal Crashing on WinXP

    Hi !

    Yep, a friend of mine had nearly the same trouble, but the difference was
    that nothing was displayed on the screen. Seems WinPCap's fault, not
    Ethereal's one (as winpcap is the driver that manages the NIC and puts it in
    promiscuous mode...)

    The trouble was simple: it was the Windows' SP2RC2 fault...does not seem to
    validate very used tools as Snort or Ethereal. But this is a current thread
    on this list ...

    Hope this helps... :)

     

    -----Message d'origine-----
    De : Vijay Mishra [mailto:mishravijay@qualityg.com]
    Envoyé : vendredi 20 août 2004 23:25
    À : pen-test@securityfocus.com; incidents@securityfocus.com
    Objet : Ethereal Crashing on WinXP

    Hi All,

    Recently I had reformatted my system and install the XP again. Earlier
    ethereal was running fine on my machine with XP.

    But now when I go for capturing the packet though ethereal it crashes after
    I stop capturing. When I tried with option 'update list of packets in
    real-time', it crashed after capturing 20-25 packets and capture info window
    still showing that ethereal is capturing the packets. All the configuration
    setting is default.

    I am totally confused and lost what might be the problem. Does anyone of you
    also encountered the same problem.

    I am using ethereal ver 0.10.6 and WinPcap ver 3.0

     

    Best Regards

    Vijay Mishra

    ----------------------------------------------------------------------------

    --
    Ethical Hacking at the InfoSec Institute. All of our class sizes are
    guaranteed to be 12 students or less to facilitate one-on-one interaction
    with one of our expert instructors. Check out our Advanced Hacking course,
    learn to write exploits and attack security infrastructure. Attend a course
    taught by an expert instructor with years of in-the-field pen testing
    experience in our state of the art hacking lab. Master the skills of an
    Ethical Hacker to better assess the security of your organization.
    http://www.securityfocus.com/sponsor/InfoSecInstitute_pen-test_040817
    ----------------------------------------------------------------------------
    ---
    ----------------------------------------------------------------------------
    --
    Ethical Hacking at the InfoSec Institute. All of our class sizes are
    guaranteed to be 12 students or less to facilitate one-on-one interaction
    with one of our expert instructors. Check out our Advanced Hacking course,
    learn to write exploits and attack security infrastructure. Attend a course
    taught by an expert instructor with years of in-the-field pen testing
    experience in our state of the art hacking lab. Master the skills of an
    Ethical Hacker to better assess the security of your organization.
    http://www.securityfocus.com/sponsor/InfoSecInstitute_pen-test_040817
    ----------------------------------------------------------------------------
    ---
    ------------------------------------------------------------------------------
    Ethical Hacking at the InfoSec Institute. All of our class sizes are
    guaranteed to be 12 students or less to facilitate one-on-one interaction
    with one of our expert instructors. Check out our Advanced Hacking course,
    learn to write exploits and attack security infrastructure. Attend a course
    taught by an expert instructor with years of in-the-field pen testing
    experience in our state of the art hacking lab. Master the skills of an
    Ethical Hacker to better assess the security of your organization.
    http://www.infosecinstitute.com/courses/ethical_hacking_training.html
    -------------------------------------------------------------------------------
    

  • Next message: Mark Blaszczyk: "Re: interesting wireless card and linux issue"

    Relevant Pages

    • Ethereal Crashing on WinXP
      ... But now when I go for capturing the packet though ethereal it crashes after ... it crashed after capturing 20-25 packets and capture info window ... Ethical Hacking at the InfoSec Institute. ... learn to write exploits and attack security infrastructure. ...
      (Pen-Test)
    • Re: NAT vs Route checking
      ... capturing the packets on the ISA server on the external NIC, ... In both cases I see the ISA server external ... Understanding the ISA 2004 Access Rule Processing ...
      (microsoft.public.isa.configuration)
    • Re: IPSEC not blocking specific IP address per Ethereal
      ... > However, when I try to block a specific IP address by using IPSEC, the ... > against those IPs but ethereal still shows their packets getting in past ... > capturing the packets before IPSEC gets to block them, ... Think about it - winpcap is non layer 3 specific - it will ...
      (comp.security.firewalls)
    • Re: IPSEC not blocking specific IP address per Ethereal
      ... > However, when I try to block a specific IP address by using IPSEC, the ... > against those IPs but ethereal still shows their packets getting in past ... > capturing the packets before IPSEC gets to block them, ... Think about it - winpcap is non layer 3 specific - it will ...
      (microsoft.public.win2000.security)