Ethereal-users: [Ethereal-users] Does Ethereal for NT with WinPcap does support PROMISCOUS mode?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Vlad-Andrei Dorobantu" <vdorobantu@xxxxxxxxxxx>
Date: Sat, 14 Oct 2000 17:13:54 GMT
Hi,

I downloaded the last Ethereal for NT and installed on my NT 4.0 (SP6) computer with the WinPcap packet driver. It�s the best and fastest NT analyzer, better that �Analyzer� tool.

But the problem is that I monitor only the packets intended for my computer MAC address (except BROADCAST and MULTICAST packets). I don�t know if there are active hubs (it could be a possibility). 3COM are telling (on the web site) that my NIC should support the PROMISCOUS mode.

I believe that on NT, the PROMISCOUS mode couldn�t be set as easy as in UNIX with the "ifconfig eth0 promisc�). Meanwhile, I found some basic analysing programs that turn on the PROMISCOUS mode on Windows. I will send you these programs.

* Does Ethereal for NT support PROMISCOUS mode?

* Are there a way to control if the NIC is in PROMISCOUS mode (3COM provides no GUI configuration panel for the NIC)

Please answer me.


Best regards,
Vlad




_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at http://profiles.msn.com.

Attachment: vpacket.zip
Description: Zip compressed data

Attachment: sniffers.zip
Description: Zip compressed data

Attachment: snoop.zip
Description: Zip compressed data