guy at alum
Jul 27, 2006, 6:31 PM
Post #3 of 3
On Jul 27, 2006, at 5:27 PM, Ulf Lamping wrote:
Re: What level does Ethereal capture packets?
[In reply to]
> What I would guess is that WinPcap is capturing "high above" the
> USB driver, at the NDIS network level.
Yes. It includes an NDIS transport layer driver. However, if the
mobile phone looks like a modem on a serial port, it's probably using
the Network Monitor driver rather than the WinPcap driver (at least
if the laptop is running NT/W2K/WP), which is still above the USB
Ethereal-users mailing list
Ethereal-users [at] ethereal