Re: What level does Ethereal capture packets?

David Kitcher wrote:
> Hi,
>  I am currently using Ethereal to capture packets when my (windows) 
> laptop is connected to my mobile phone. I had to install driver s/w 
> before the phone could communicate with the laptop (over USB). My 
> question is : when Ethereal captures the packets, where is it 
> capturing them? Below the phone driver (e.g. between the driver and 
> the USB port) or above the driver s/w?
>
This is really a WinPcap question, you may ask that team about it.

What I would guess is that WinPcap is capturing "high above" the USB 
driver, at the NDIS network level.

Regards, ULFL