You can try this URL : www.arp-sk.org
----- Original Message ----- From: "Gerlach Hendrik" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, August 09, 2002 10:04 AM Subject: AW: [WinPcap-users] How to capture packets in the future Where to get some working source code for the "switch problem", e.g. for generating such fake ARP replies ? -----Urspr�ngliche Nachricht----- Von: nergim [mailto:[EMAIL PROTECTED]] Gesendet: Freitag, 9. August 2002 09:54 An: [EMAIL PROTECTED] Betreff: Re: [WinPcap-users] How to capture packets in the future However you can cheat a little by flooding switch with ARP/RARP packets, or generating fake ARP replies, etc. This is unethical, has no good effects on network performance but it works, generally. I did it. E.K. ----- Original Message ----- From: "Gianluca Varenni" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, August 09, 2002 10:02 AM Subject: Re: [WinPcap-users] How to capture packets in the future > You cannot capture on switched networks, since the machine running winpcap > does not receive other than packets to/from that host (and some other stuff, > like broadcast). > > On switched networks, you have to connect the capturing machine on a > particular port of the switch (which is not present on all the equipments), > sometimes called monitor port or similar, that receives all the packets > passing through te switch. > > This is not a winpcap limitation, it's a feature of switched networks. > > GV > > ----- Original Message ----- > From: "??? Chanjun Yu" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Friday, August 09, 2002 8:47 AM > Subject: RE: [WinPcap-users] How to capture packets in the future > > > Some LAN networks are based on switch. > > How to capture all the packets in this enviromnent? Could winpcap do this? > > > >
