Depends. IIRC the NIC may be in promiscuous mode and pass all packets up
the stack, but the firewall sits between it and the application. Hence
packets will be filtered. I can't test this at work to verify as we have
the firewall controlled by a group policy, but I can check when I get
home.
Randy Grein
Network Engineer
"Keith French" <keithfrench@xxxxxxxxxxxxx>
Sent by: wireshark-users-bounces@xxxxxxxxxxxxx
06/28/2007 08:27 AM
Please respond to
Community support list for Wireshark <wireshark-users@xxxxxxxxxxxxx>
To
"Wireshark-Users" <wireshark-users@xxxxxxxxxxxxx>
cc
Subject
[Wireshark-users] Packet Capture & Personal Firewalls
I thought this did not matter as Wireshark puts the NIC card in
promiscuous mode and hence the IP address of the PC is irrelevant unless
you want to things such as pings. However, some people think otherwise.
Are there any problems doing a capture on a WinXP machine that has a
personal firewall such as ZoneAlarm running on it?
_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users
- -------------------------
CONFIDENTIALITY NOTICE: The information in this message may be proprietary and/or confidential, and is intended only for the use of the individual(s) to whom this email is addressed. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to this email and deleting this email from your computer. Nothing contained in this email or any attachment shall satisfy the requirements for contract formation or constitute an electronic signature.