Ethereal-users: Re: [Ethereal-users] Promiscouis Mode Help

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Wed, 15 Mar 2006 21:14:26 +0100 (CET)
Hi,

About Toredo:
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/teredo.mspx
http://www.mattb.net.nz/blog/2005/12/27/miredotoredo-patent-status/

> Normally the interface only passes packet with the correct Ip  address.

The interface passes packets with the correct MAC address, which can
either be the unique address of the card, the broadcast address (if
enabled) and any multicast group addresses enabled.

Thanx,
Jaap

On Wed, 15 Mar 2006, Mr Fred (Dell 9300) wrote:

> In addition to the Centrino Issue, My system runs the interface in a MS
> tunnel driver that ethereal does not understand.. Toredo is the protocol
> "My guess"   My understanding  of promiscouis mode = Pass all recognized
> packets, Normally the interface only passes packet with the correct Ip
> address. This probably is done at the driver level and releives the OS
> of processing un needed packets.
>
> Fred
>
>
>   ----- Original Message -----
>   From: Brian Hodgen
>   To: Ethereal user support
>   Sent: Wednesday, March 15, 2006 1:11 PM
>   Subject: Re: [Ethereal-users] Promiscouis Mode Help
>
>
>   Thanks for the quick reply, maybe I'm confused on the terminology.
>   When I use windows and ethereal I am able too see all the wireless
>   packets sent from another laptop to my router. I did't have to do
>   anything special in windows to get this to work, just installed
>   ethereal, and winpcap. I thought this was know as promiscuous mode,
>   but I could be confused. Anyway, when I try this in Linux I cannot see
>   the other packets and I get a lot of STP protocol packets, which I do
>   not see in windows at all.
>
>   Thanks,
>
>
>   On 3/15/06, Mr Fred (Dell 9300) <Mr_Fred@xxxxxxx> wrote:
>     Brian
>
>     Here is mmy reply from Intel Support.
>
>     I cant find any one that knows about the toredo or MS tunnel driver that shows up under windows..
>
>     Tried to find any one that could tell me  how to what rpm or if ethereal will work with Red Hat 9.
>
>
>     Fred
>
>
>
>     Hello Fred:
>
>     Thank you for contacting Intel(R) Technical Support.
>
>     Very unfortunately none of the current wireless adapters will support promiscuous mode.
>
>     Regards,
>
>     Sergio G.
>     Intel Technical Support
>
>     Intel is a registered trademark of Intel Corporation or its subsidiaries in the United States and other countries.
>
>     *Other names and brands may be claimed as the property of others.
>
>     A representative of Intel may subsequently contact you (via email) in order to obtain your feedback on the quality of the support you received. If you do not wish to participate, simply delete the survey email.
>
>
>
>
>
>
>
>     <===== Received from Mr_Fred@xxxxxxx on 2006-01-26-03.43.05.000000 ======>
>
>     Do you have a 2915abg compatable product that does support promiscuous mode?
>
>     Fred
>     ----- Original Message -----
>     From: <mcdsupport@xxxxxxxxxxxxxxxxxxxxx>
>     To: < Mr_Fred@xxxxxxx>
>     Sent: Wednesday, January 25, 2006 5:37 PM
>     Subject: RE: Re: Intel(R) PRO/Wireless 2915ABG Network Connection Email
>     Support Request
>
>
>     > Hello Fred:
>     >
>     > Thank you for contacting Intel(R) Technical Support.
>     >
>     > Please be aware that the Intel(R) PRO/Wireless 2915ABG Network Connection
>     > does not support promiscuous mode.
>     >
>     > Regards,
>     >
>     > Sergio G.
>     > Intel Technical Support
>     >
>     > Intel is a registered trademark of Intel Corporation or its subsidiaries
>     > in the United States and other countries.
>     >
>     > *Other names and brands may be claimed as the property of others.
>     >
>     > A representative of Intel may subsequently contact you (via email) in
>     > order to obtain your feedback on the quality of the support you received.
>     > If you do not wish to participate, simply delete the survey email.
>     >
>     >
>     >
>     > <===== Received from Mr_Fred@xxxxxxx on 2006-01-25-22.12.55.000000 ======>
>     >
>     > Thanks for the reply
>     >
>     > I have a Dell  Insprion 9300 with an 2915abg Centrino Wireless .
>     > I need to use this system to do Network monitoring and cannot determine
>     > where a MS Tunnel driver is coming from.
>     >
>     > This driver seems to communicate in ?Toredo ?
>     > format and I get only MDS headers displayed.
>     >
>     > Any help with understanding Toredo ??
>     >
>     > I can monitor with the NICS in the system but not through the wireless.
>     >
>     > Screen shot attached.
>     >
>     > All traffic appears in the MS Tunnel driver ( Can I disable it ??)
>     >
>     > Can you help me with TCPIP monitoring via the 2915 to look at 802.11g
>     > data.
>     >
>     > Use Win XP Pro . Ethereal release 14.
>     >
>     > Fred
>     >
>     > ----- Original Message -----
>     > From: < mcdsupport@xxxxxxxxxxxxxxxxxxxxx>
>     > To: <Mr_Fred@xxxxxxx>
>     > Sent: Tuesday, January 24, 2006 9:33 AM
>     > Subject: RE: Intel(R) PRO/Wireless 2915ABG Network Connection Email
>     > Support
>     > Request
>     >
>     >
>     >> Hello Fred:
>     >>
>     >> Thank you for contacting Intel(R) Technical Support.
>     >>
>     >> In an effort to assist you with this issue, we would appreciate if you
>     >> could provide us with additional information.  Please write or call us
>     >> back with more details pertaining to the nature of your issue.
>     >>
>     >>
>     >>
>     >> Regards,
>     >>
>     >> Sergio G.
>     >> Intel Technical Support
>     >>
>     >> Intel is a registered trademark of Intel Corporation or its subsidiaries
>     >> in the United States and other countries.
>     >>
>     >> *Other names and brands may be claimed as the property of others.
>     >>
>     >> A representative of Intel may subsequently contact you (via email) in
>     >> order to obtain your feedback on the quality of the support you received.
>     >> If you do not wish to participate, simply delete the survey email.
>     >>
>     >>
>     >>
>     >>
>     >> <===== Received from Mr_Fred@xxxxxxx on 2006-01-23-21.12.53.000000
>     >> ======>
>     >>
>     >> Trying to use ethereal to monitor 802.11g traffic.MS Tunnel Driver ??
>     >> ##ERIGNORE##
>     >> First_name: Fred
>     >> Last_name: Wolf
>     >> Email: Mr_Fred@xxxxxxx
>     >> Customer_type: End User
>     >> Product: Intel(R) PRO/Wireless 2915ABG Network Connection
>     >> Product_id: 1847
>     >> OS: Windows* XP
>     >> Survey_opt_in: Yes
>     >> Drivers: No
>     >> Adapter_Model: No
>     >> firm_driv_version: w915ABG   9.0.3.9
>     >> which_aps: Motorola WR850g
>     >> which_adptrs: Intel Centrino
>     >> Description_Question: Trying to use ethereal to monitor 802.11g
>     >> traffic.MS
>     >> Tunnel Driver ??
>     >> Form_id: 11
>     >>
>     >>
>     >>
>     >> { See Attached File: Attachment }{ See Attached File: history.html }
>     >>
>     >>
>     >> IMPORTANT NOTE IF YOU REPLY TO THIS EMAIL: Please perform a reply with
>     >> history so that the following identifier "[THREAD_ID:6920801]" is seen in
>     >> your response email. This will insure that your reply is delivered to the
>     >> proper support team at Intel and will reduce the time it takes to receive
>     >> a response. Thank you.
>     >>
>     >>
>     > { See Attached File: MSTunnel.bmp }
>     >
>     >
>     > IMPORTANT NOTE IF YOU REPLY TO THIS EMAIL: Please perform a reply with
>     > history so that the following identifier "[THREAD_ID:6929839]" is seen in
>     > your response email. This will insure that your reply is delivered to the
>     > proper support team at Intel and will reduce the time it takes to receive
>     > a response. Thank you.
>     >
>     >
>
>
>     IMPORTANT NOTE IF YOU REPLY TO THIS EMAIL: Please perform a reply with history so that the following identifier "[THREAD_ID:6934590]" is seen in your response email. This will insure that your reply is delivered to the proper support team at Intel and will reduce the time it takes to receive a response. Thank you.
>
>
>
>     _______________________________________________
>     Ethereal-users mailing list
>     Ethereal-users@xxxxxxxxxxxx
>     http://www.ethereal.com/mailman/listinfo/ethereal-users
>
>
>
>
>
>
>
> ------------------------------------------------------------------------------
>
>
>   _______________________________________________
>   Ethereal-users mailing list
>   Ethereal-users@xxxxxxxxxxxx
>   http://www.ethereal.com/mailman/listinfo/ethereal-users
>