Re: Portable Ethereal

Eubanks, Paul wrote:

> Now then, there’s just one thing missing from the equation – npf.sys 
> (Part of WinPcap)has to reside on the local machine.  Is there a way to 
> redirect Ethereal to look for npf.sys in another location besides 
> %systemroot%\system32\drivers?

No, because Ethereal/Wireshark doesn't look there.  WinPcap looks there; 
Ethereal/Wirecap (and other applications) just call WinPcap to open an 
adapter for capturing.

You might want to ask the WinPcap developers about this.