On (17:03 23/07/03), Daniel wrote: > You could easily edit the packet.dll to set the mode as soon as you open it. > It might be wpcap.dll that ethereal uses, so the filter setting is done as > soon as you call pcap_open_live, which will override what you've edited in > packet.dll. So you need edit the PacketSetHwFilter function to always set > the mode you require. This way, no matter what capture mode is set in > ethereal or windump, you'll always end up with the same mode. > Unfortunately, you need to ask someone to compile it for you, as I don't > have VC++ installed to do it for you.
Thanks for the pointers to the correct bits of code to edit. I'll start to have a look about now to see if I can work out how to force this behaviour without too much difficulty. As for compiling it I have copies of VC++ available to me. Thanks to the list members for their suggestions, I might well post again with the results of trying to change the source. Regards paul. ================================================================== This is the WinPcap users list. It is archived at http://www.mail-archive.com/[EMAIL PROTECTED]/ To unsubscribe use mailto: [EMAIL PROTECTED] ==================================================================
