Angus Robertson - Magenta Systems Ltd wrote: >> I've tested some sniffers with and without WinPCap (W2K SP4), but they >> all are not capable to capture local traffic (at least on my box). >> Is this normal? > > It does seem to be the case. > > Raw sockets monitors a specific IP address, but presumably the routing > table bypasses this if the IP address is the same. WinPcap monitors an > ethernet adaptor, and local traffic does not go through this. > > Fortunately I have four servers with different OSs for testing on my > network.
Do you have a dual/dual core 64bit box (hardware DEP capable)? I'm looking for someone who could do a small test of one of my apps. > An unrelated question. WinPcap shows a vast number of packets being > broadcast around my network with an ethernet protocol of x88AD, which > is not in documents I can find, nor does Ethereal describe it. Not > quite sure which MAC address is sending them, but some MACs are > replying. Has anyone any ideas what this protocol is? http://www.ethereal.com/lists/ethereal-users/200412/msg00350.html Arno Garrels -- To unsubscribe or change your settings for TWSocket mailing list please goto http://www.elists.org/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be