["Eddie Lawrence" <eddie@xxxxxxxxxxxxxxxxxxx>]

WinDump is able to see "traffic that is neither broadcast traffic, multicast
traffic, traffic to my machine, or traffic from my machine". The interface
that is being used by Ethereal is the same as the one being used by WinDump.
Perhaps I'm just doing something wrong. I am making sure that the
Promiscuous option is selected when setting up that capture and I'm not
filtering anything at all.

Perhaps I'll un-install Ethereal and then re-install.


 ----- Original Message -----
From: "Guy Harris" <gharris@xxxxxxxxx>
To: "Eddie Lawrence" <eddie@xxxxxxxxxxxxxxxxxxx>
Cc: "Guy Harris" <gharris@xxxxxxxxx>; <ethereal-users@xxxxxxxxxxxx>
Sent: Monday, May 28, 2001 4:31 PM
Subject: Re: [Ethereal-users] Xircom RE100 RealPort card not going into
promiscuous mode


> On Sun, May 27, 2001 at 08:13:20PM -0400, Eddie Lawrence wrote:
> > WinDump works!
>
> "Works" as in "shows traffic that is neither broadcast traffic,
> multicast traffic, traffic to your machine, or traffic from your
> machine"?
>
> > I guess that rules out the NIC and WinPcap. Perhaps Ethereal
> > doesn't like something about Windows 2000?
>
> Unlikely - Ethereal uses the same mechanism, on every OS in existence,
> to request promiscuous mode, and that's the same mechanism WinDump uses
> (it passes a non-zero value as the "promisc" argument to
> "pcap_open_live()").
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>