Hi. Two questions:
-why aren't you using Winpcap 3.0 final (or better, WinPcap 3.1 beta3)? -have you tried capturing with windump? By default it captures in promiscuous mode, you can disable promiscuous mode with option "-p". You can list of the adapters with "windump -D" (D capital letter), and choose a specific one with "windump -i<adaptNum>" Have a nice day GV ----- Original Message ----- From: "Kyle W. Cartmell" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, September 17, 2004 3:18 AM Subject: Re: [WinPcap-users] etheral works, winpcap examples do not > When I grab packets in Etheral in promiscuous mode, it works great. > "Capture packets in promiscuous mode" is checked in the "Capture > Options" dialog. The sample program didn't work until I changed argument > three in the call to pcap_open_live from 1 to 0. > > > > > On Sep 16, 2004, at 5:33 PM, Kyle W. Cartmell wrote: > > > >> Promiscuous mode is active within Ethereal, and it can see my network > >> traffic. > > > > > > Active, or *not* active? > > > >> I'll try modifying the example program and see what happens... hey, > >> look at that... go figure. lol > >> > >> Yeah, promisc = 0, packets all over the place. > > > > > > If you saw traffic in Ethereal with promiscuous mode *active*, it > > should work in the example program with promisc = 1. > > > > > > > > ================================================================== > > This is the WinPcap users list. It is archived at > > http://www.mail-archive.com/[EMAIL PROTECTED]/ > > > > To unsubscribe use mailto: > > [EMAIL PROTECTED] > > ================================================================== > > > > > > > > ================================================================== > This is the WinPcap users list. It is archived at > http://www.mail-archive.com/[EMAIL PROTECTED]/ > > To unsubscribe use > mailto: [EMAIL PROTECTED] > ================================================================== > ================================================================== This is the WinPcap users list. It is archived at http://www.mail-archive.com/[EMAIL PROTECTED]/ To unsubscribe use mailto: [EMAIL PROTECTED] ==================================================================
