Re: [Wireshark-dev] PPP capture

2016-01-12 Thread Yang Luo
On Tue, Jan 12, 2016 at 9:56 AM, Guy Harris wrote: > > On Jan 11, 2016, at 5:42 PM, Yang Luo wrote: > > > AFAIK, Npcap/WinPcap works on the data link level and it sees the > Ethernet frames. > > It sees data link frames, whatever they might happen to be; it's not > necessary Ethernet. > Yeah, m

Re: [Wireshark-dev] PPP capture

2016-01-12 Thread Gisle Vanem
Yang Luo wrote: > AFAIK, Npcap/WinPcap works on the data link level and it sees the Ethernet > frames. In my understanding, VPN SSL (https) > or raw HTTP is just data of high-levels (IP packets) for Npcap/WinPcap. I > don't know if it's appropriate or viable for > Npcap/WinPcap to see this data.

Re: [Wireshark-dev] PPP capture

2016-01-11 Thread Guy Harris
On Jan 11, 2016, at 5:42 PM, Yang Luo wrote: > AFAIK, Npcap/WinPcap works on the data link level and it sees the Ethernet > frames. It sees data link frames, whatever they might happen to be; it's not necessary Ethernet. > In my understanding, VPN SSL (https) or raw HTTP is just data of high

Re: [Wireshark-dev] PPP capture

2016-01-11 Thread Yang Luo
Hi Alexis, AFAIK, Npcap/WinPcap works on the data link level and it sees the Ethernet frames. In my understanding, VPN SSL (https) or raw HTTP is just data of high-levels (IP packets) for Npcap/WinPcap. I don't know if it's appropriate or viable for Npcap/WinPcap to see this data. Maybe a higher-l