Greetings,
I'm working on some material for a course (and some labs) on networking.
I was asked to find a way of letting students sniff traffic coming from
and to their machines.
I've installed winpcap and ethereal (as well as windump for testing) and
then stumbled across the "loading the programs as Administrator first"
problem, but got over that with the help of the FAQ (I switched
"\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Service\NPF\Start" to 1)
However my current problem is that any user of the machine (even standard
users) appears to be able to make the card change to promiscuous mode when
using Ethereal to sniff traffic, I'd like to know if anyone knows a way of
stopping this from happening.
(I'm using WinPcap 3.01 alpha
Ethereal 0.9.13a
Windows XP Professional, Version 2002, Service pack 1
)
Regards
paul.
==================================================================
This is the WinPcap users list. It is archived at
http://www.mail-archive.com/[EMAIL PROTECTED]/
To unsubscribe use
mailto: [EMAIL PROTECTED]
==================================================================
