Quote:
Unfortunately, WOL packets can be contained in almost any transport layer, so you can't really narrow the capture down very well.


Can be, but they're usually just plain-old UDP packets, because that's the easiest way to put them together from userspace.

As for captures, I'm with Mark on this one: use tcpdump. You can then look at it in Ethereal, if you need a GUI (also available on Windows, if that's the only GUI you have available).
_________________________
-- roger