On (16:34 23/07/03), Daniel wrote: > I don't know if I got your question right, not sure about my answer at all, > but I think what you receive on your network card depends on the network > structure, so if you receive packets that DON'T have the MAC address of the > network card you're sniffing on, and you don't want them to be passed to > passed to your application, you have to untick the "Capture packets in > promiscous mode" in Ethereal. You can't stop packets that don't contain MAC > address of your (or each student's) network card from physically arriving, > so...you simply disable the promiscous mode.
The question I was asking was is there a way in either winpcap or XP that anyone has encountered to stop cards being switched to promisuous mode by standard user accounts. Since I cannot change the networking structure here traffic will flow past these machines that I wouldn't want these students sniffing, so I'd rather enforce the non-promiscuous mode of the cards with some kind of policy or setting than trust the student body. If it was just me I'd do as you suggest and just untick "Capture packets in promiscuous mode". Regards paul. ================================================================== This is the WinPcap users list. It is archived at http://www.mail-archive.com/[EMAIL PROTECTED]/ To unsubscribe use mailto: [EMAIL PROTECTED] ==================================================================
