Thing is, I just used raw sockets to send tcp packets to a big list of IP addresses. When I sniffed (Ethereal) the network I saw a few ARP packets coming in and out, but that's nothing compared to how many packets I've sent out.
So what does Windows do to send it out? I use Cable, maybe it sends it to the mac address of the router on the ISP? I have no clue, but I don't see using WinPcap + getting remote MAC address of every destination IP will get me the results I need. I know Raw sockets has huge packet loss if you send too fast, but it doesn't do any mac address fluff. I know any packet from remote IP will give me back its MAC address, but how can I get it to communicate with my machine in the first place if I don't know its MAC address? Whoever answers, I'm more interested in the first paragraph ;-> Thanks, Daniel ----- Original Message ----- From: "Eric Thered" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, July 01, 2003 3:12 AM Subject: Re: [WinPcap-users] Need a simple way to get destination mac address > Any type of comms with the remote host will give you > back a remote MAC address (icmp, tcp, udp, whatever). > If grab the packets with your Winpcap app, you will > get the MAC address of the source and the destination > host for every packet. > > Info on arp can be found in RFC 826 or just do a > search on google. > > Each NIC you get has a unique MAC address, so you > can't just use any address. Plenty of info on google > or see your favorite book seller for lots of books on > networking. > > > > --- Daniel Frimerman <[EMAIL PROTECTED]> wrote: > > Do I get remote mac address through ARP? Surely > > there is an easier way? > > > > I used raw sockets and sniffed my network and saw no > > ARP packets sent out. I used a list of random IP > > addresses. The packets contained the same mac > > address. What is it? Can I use any destination mac > > address? *confused* > > > > Also, I heard bad news about inability to send > > packets with PPP :( That's some major drawbacks. It > > just has to be said bold in applications I release > > that no PPP is supported :( > > > > > > > > Daniel > > > __________________________________ > Do you Yahoo!? > SBC Yahoo! DSL - Now only $29.95 per month! > http://sbc.yahoo.com > > > ================================================================== > This is the WinPcap users list. It is archived at > http://www.mail-archive.com/[EMAIL PROTECTED]/ > > To unsubscribe use > mailto: [EMAIL PROTECTED] > ================================================================== > ================================================================== This is the WinPcap users list. It is archived at http://www.mail-archive.com/[EMAIL PROTECTED]/ To unsubscribe use mailto: [EMAIL PROTECTED] ==================================================================
