Ethereal-users: [Ethereal-users] Does Ethereal for NT with WinPcap does support PROMISCOUS mode?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Vlad-Andrei Dorobantu" <vdorobantu@xxxxxxxxxxx>
Date: Sat, 14 Oct 2000 17:13:54 GMT
Hi,

I downloaded the last Ethereal for NT and installed on my NT 4.0 (SP6) computer with the WinPcap packet driver. It’s the best and fastest NT analyzer, better that “Analyzer” tool.

But the problem is that I monitor only the packets intended for my computer MAC address (except BROADCAST and MULTICAST packets). I don’t know if there are active hubs (it could be a possibility). 3COM are telling (on the web site) that my NIC should support the PROMISCOUS mode.

I believe that on NT, the PROMISCOUS mode couldn’t be set as easy as in UNIX with the "ifconfig eth0 promisc”). Meanwhile, I found some basic analysing programs that turn on the PROMISCOUS mode on Windows. I will send you these programs.

* Does Ethereal for NT support PROMISCOUS mode?

* Are there a way to control if the NIC is in PROMISCOUS mode (3COM provides no GUI configuration panel for the NIC)

Please answer me.


Best regards,
Vlad




_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at http://profiles.msn.com.

Attachment: vpacket.zip
Description: Zip compressed data

Attachment: sniffers.zip
Description: Zip compressed data

Attachment: snoop.zip
Description: Zip compressed data