Q-1: Windump seems not to be running.
A: Have you installed the new network driver? Windump 2.0 needs the new updated network driver in order to work properly. Download and install the appropriate network driver for your system.
Q-2
: When I try to install the driver I get the error: "Could not create Services subkey".A
: This problem might appears on NT 4.0 machines with Internet Explorer 4/5. Currently we do not know any solution to this problem.: How can I know the names of the network adapters installed in my machine?
A
: TypeWinDump –D
WinDump –i adaptername
Q-4
: Can I use WinDump on a PPP connection?A
: Yes. WinDump was written to work on Ethernet networks, but works correctly on all the networks with packet length smaller than the Ethernet one. To discover the name of the PPP adapter (usually PPPMac), go to Q-3
Q-5
: Why doesnt WinDump capture all the packets from the network?A
: You are probably using the 1.0 version of WinDump, that had some performance problems in capture-mode. Download and install the new 2.0 version from the download page.Remember: you have to download both the network driver and the windump program.
Q-6
: I have installed version 2.0 and WinDump keep on loosing packets.A
: Try to set a bigger drivers buffer with the -B switch. For exampleWindump –B 5000
Starts WinDump with a 5 megabytes drivers buffer. If not specified, the dimension of the buffer is 1 megabyte. Bigger sizes mean better capture performances.
Remember, however, that WinDump is a software network analyzer and needs a fast machine if used on fast networks.
Q-7
: When I interrupt WinDump, the program hangs up and I need to kill it with the task manager.A
: This is a problem related to the 1.0 version. Download and install the new 2.0 version from the download page.Q-8
: Can I run WinDump in Windows 2000?A
: Not yet. We plan to release a Windows 2000 version of WinDump in the near future.
Q-9
A
: Yes.
Q-10
: Do I need to be Administrator in order to run Windump?A
: No. Unlike TCPdump, Windump does not need to be launched by an Administrator. However the system manager can manually set the permissions on that file in order to disable the access to normal users.
Q-11
: Why do I get strange results when I have two instances of WinDump running on Win95/98?A
: The packet driver in Windows 95/98 currently supports only one instance at a time. Vice versa, the NT version permits to make more than one capture at the same time.