Yes, that is the question. >From what you describe, it may be a useful exercise, in terms of what ZA (and others) might "leak". This is an exercise in an internet security course FWIW.
Thanks. joea/ 7/12/03 9:43:46 AM, "Daniel Frimerman" <[EMAIL PROTECTED]> wrote: >Regarding point 2: > >Winpcap is programmed as a TDI (transport device). It's positioned above (or >after) the itnermediate and lower level drivers. This means that if ZA >blocked anything, then you won't get it, nor the TCP/IP stack. So it's >really a question of what exactly ZA blocks. > >Daniel > >----- Original Message ----- >From: "Joe Acquisto" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Sent: Saturday, July 12, 2003 2:23 PM >Subject: [WinPcap-users] PPP, zonealarm > > >> I'm posting to this list, per suggstion of the ethereal folks. You may >ignore item 1, if you wish, as does >> not pertain to this list, directly. >> >> Actually, item 2, while not answered, appears to be hinted at in the docs, >far as reliability is concerned. >> >> But, I'd like a bit more info, if possible. >> >> Here goes - >> >> >>> >> I noted the posts on W2k and PPP. >> >> 1 - On win98 (winpcap 2.3) I can capture packets on the PPP adapter (dial >up networking). Is it not >> supposed to do this? >> >> 2 - I was tasked with a challenge to monitor a dial up connection with >ZoneAlarm active. This brings up a >> question in my mind as to how winPcap and ZoneAlarm mingle (or not) and >what I should expect, >> running ethereal and ZoneAlarm at the same time. I guess I'm going >toward - can I count on ZA to block >> all packets? If I see "leakage" is this due to a ZA fault or because >ethereal/winpcap are looking on the >> "wrong side" of the firewall? >> >> As you can see, I don't have a clue. >> >> joea. >> >> >> >> >> >> >> >> ================================================================== >> This is the WinPcap users list. It is archived at >> http://www.mail-archive.com/[EMAIL PROTECTED]/ >> >> To unsubscribe use >> mailto: [EMAIL PROTECTED] >> ================================================================== >> > > > > >================================================================== > This is the WinPcap users list. It is archived at > http://www.mail-archive.com/[EMAIL PROTECTED]/ > > To unsubscribe use > mailto: [EMAIL PROTECTED] >================================================================== > ================================================================== This is the WinPcap users list. It is archived at http://www.mail-archive.com/[EMAIL PROTECTED]/ To unsubscribe use mailto: [EMAIL PROTECTED] ==================================================================
