<HTML>
<STYLE> BODY { font-family:Arial, Helvetica, sans-serif;font-size:12px; }</STYLE>
<br>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">Hello Everyone,</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" /><o:p><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">I am using WinXP Professional SP3 and Microsoft Visual Studio 6.0 with SP5.</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">I installed Winpcap version 4.0.2.</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> I also got the WpdPack and compiled your </SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">basic_dump example (in ...\WpdPack\Examples-pcap\basic_dump). The only thing</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">I had to add to the visual c++ project was the IPHlpApi.Lib (6/16/1999 12:44 PM). </SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">When I try to execute the app out of the debugger, it crashes</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">at the call to pcap_findalldevs. I verified that the npf driver was running</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">before I ran the app - and it was. Here is the error:</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> Unhandled exception in basic_dump.exe (NDISNPP.DLL): 0xC0000005: Access Violation. </SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> Call Stack: NDISNPP! 5a704d91()</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">I searched your FAQs and your winpcap-users mailing list archives for this</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">or similar problem. The only thing I found was a post back in August 2008</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">where В. Rasta posted a similar problem. However, I didn't see a response</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">or a resolution??</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">Interestingly enough, I downloaded windump 3.9.5 and ran it with the -D option. </SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">It listed all my adapters ok, and I selected an adapter with the -i option and it </SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">captured packets ok. Here are the results I got for the -h option:</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> windump version 3.9.5, based on tcpdump version 3.9.5</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> WinPcap version 4.0.2 (packet.dll version 4.0.0.1040), based on libpcap version 0.9.5</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">Here is some info for the NDISNPP.DLL I'm using:</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">File Version: 5.1.2600.5512</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">File Date: 4/13/08 8:12 PM</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">File Size: 57,344 bytes</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">File Location: C:\WINDOWS\system32\npp</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">Attached is a screen shot of the debugger display for the crash.</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">Any ideas as to what the problem is here with the basic_dump example?</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">Perhaps I'm overlooking something simple.</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">Thanks in advance for any help.</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri">Regards,</SPAN></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> </SPAN></o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: Calibri"> --Bill Salibrici</SPAN></P></HTML>