Re: Portable Ethereal

Guy Harris wrote:
> Eubanks, Paul wrote:
>
>> Now then, there’s just one thing missing from the equation – npf.sys 
>> (Part of WinPcap)has to reside on the local machine.  Is there a way 
>> to redirect Ethereal to look for npf.sys in another location besides 
>> %systemroot%\system32\drivers?
>
> No, because Ethereal/Wireshark doesn't look there.  WinPcap looks 
> there; Ethereal/Wirecap (and other applications) just call WinPcap to 
> open an adapter for capturing.
>
> You might want to ask the WinPcap developers about this.
See http://www.cacetech.com/products/toolkit.htm (essentially the 
winpcap team), they will sell something like that.

Regards, ULFL