OSQA is unmaintained. Help us figure out where to go from here.

Hello, I'm running wireshark as admin on a win7 laptop and using a Sierra Wireless 308 HSPA adapter that I want to capture on. The wireshark "interfaces" dlg won't show this interface. I am using v1.4.3 of wireshark and v4.1.2. When I run windump as admin, it does not show the Sierra Wireless 308 adapter either. Any idea what might help?

asked 24 Jan '11, 09:40

davidfi's gravatar image

davidfi
1111
accept rate: 0%

Very interesting. I joined this community because I don't see the USB308 when using Wireshark 1.6.2. I have tried WinXP and Win7 Enterprise 64 bit. When I use a computer with WinXP and Wireshark 1.4.3, I can see the interface just fine.

I'm using the Generic Watcher from Sierra R 11.3.1104.1 Build 3004

Did you ever get resolution on your USB308 issue with Wireshark 1.4.3?

(10 Oct '11, 15:47) mwwagner

Note that different versions of Wireshark on Windows might come with different versions of WinPcap; differences of that sort between versions of Wireshark are, if the two versions of Wireshark come with different versions of WinPcap, almost certainly differences between versions of WinPcap.

(10 Oct '11, 18:48) Guy Harris ♦♦

If WinDump doesn't see the interface, the problem isn't with Wireshark, it's with WinPcap.

Mobile phone Internet connections almost always, if not always, use PPP as the protocol. The WinPcap FAQ entry on PPP connections says

Q-5: Can I use WinPcap on a PPP connection?

A: Windows NT4. It's not possible to capture on PPP/VPN connections on this operating system.

Windows 2000/XP (x86)/2003 (x86). these systems have limitations in the NDIS binding process that prevent a protocol driver from working properly on WAN adapters. WinPcap 3.1 and newer offer limited support for capturing on dial-up adapters using a wrapper over the Microsoft NetMon driver.

NOTES:

  • it is possible to capture control packets (LCP and NCP) using the "Generic Dialup" or "Generic NdisWan" adapter (which is always listed even if no dialup connections are available). Control frames are captured as Ethernet encapsulated PPP frames.
  • the PPP protocol is translated by the OS into a fake Ethernet. You'll see Ethernet frames and not PPP frames.
  • transmission is not supported.
  • filtering and statistics gathering is done at user level.

Windows XP (x64)/2003 (x64). It's not possible to capture on PPP/VPN connections on these operating systems.

Windows Vista and more recent. It's not possible to capture on PPP/VPN connections on these operating systems.

Windows 7 is more recent than Windows Vista, so there's no support for capturing on mobile phone adapters (or dial-up connections, or VPNs, or...) on Windows 7.

permanent link

answered 10 Oct '11, 19:04

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335195
accept rate: 19%

edited 10 Oct '11, 19:06

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×47

question asked: 24 Jan '11, 09:40

question was seen: 4,223 times

last updated: 10 Oct '11, 19:06

p​o​w​e​r​e​d by O​S​Q​A