Hi Matthew.
I've read all the messages trying to find out what could cause
the problem.
I want to add a couple of things:
1. winpcap does not install anything that modifies the
behavior of a nic driver by changing registry entries or similar (although it
does install a couple of registry
Mathew,
Matthew Tagg wrote:
Hi Terry
My replies below.
A couple of things as I read this thread- based on speculation as I try
to understand what is going on.
- some process must intercepting ARP replies and sending out incorrect
ARP reply packets
By this it take it you mean some applicatio
Hi Terry
My replies below.
> A couple of things as I read this thread- based on speculation as I try
> to understand what is going on.
>
> - some process must intercepting ARP replies and sending out incorrect
> ARP reply packets
By this it take it you mean some application process? Can in not
heard of this might indicate a unique software
incompatibility that arose, eg between Netlimiter and WinPCap and the
Realtek windows driver.
- Original Message -
From: "Stef" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, November 30, 2004 2:59 PM
Subject: Re: [
patibility that arose, eg between Netlimiter and WinPCap and the
Realtek windows driver.
- Original Message -
From: "Stef" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, November 30, 2004 2:59 PM
Subject: Re: [WinPcap-users] Criritcal issue: NIC stealing
I just realized - reading more of this thread - that you were
experiencing the problem even when not running a capture program. Then
look at my suggestion below the other way around: start with the state
of "stealing" IPs, and remove - one at a time - various programs
running, until the process sto
EMAIL PROTECTED]>
*Sent:* Tuesday, November 30, 2004 3:46 AM
*Subject:* Re: [WinPcap-users] Criritcal issue: NIC stealing all
ARP requests.
Matthew,
Switches keep track of which mac addresses are on which port for
that switch, i.e. you have a table on the switch of mac
Could you possibly run
http://www.sysinternals.com/ntw2k/freeware/procexp.shtml
then start a trace/capture from your system, and see who's the
"perpetrator"? It would also be nice if you could run a second trace,
from a system with no IP address associated with it (*nix/*BSD?!?),
sniffing traffic
Systems
To: [EMAIL PROTECTED]
Sent: Tuesday, November 30, 2004 3:46
AM
Subject: Re: [WinPcap-users] Criritcal
issue: NIC stealing all ARP requests.
Matthew,
Switches keep
track of which mac addresses are on which port for that switch, i.e. you
have a table on the
Matthew,
Switches keep
track of which mac addresses are on which port for that switch, i.e. you
have a table on the switch of mac address/port. It's possible that
there are two entries in the switch table for the same mac address but
different port. This could happen if you switched a mac
Pardon me for jumping in, but if you're trying to keep traffic
statistics while connected to a switch port (as opposed to a hub),
how does your traffic statistic program convince the switch to
forward all of the network's packets to its port? I am far
from expert in this area, but it seems to me t
Monday, November 29, 2004 8:41 PM
Subject: RE: [WinPcap-users] Criritcal issue: NIC stealing all ARP requests.
> Matthew,
> WinPcap by itself is not able at all to answer to ARP requests: winpcap is
a
> packet library that receives and sends raw traffic. An application that
uses
> Win
Matthew,
WinPcap by itself is not able at all to answer to ARP requests: winpcap is a
packet library that receives and sends raw traffic. An application that uses
WinPcap could answer to ARP requests, by I think this is not your case,
because it looks that the problems persists even if you uninstal
13 matches
Mail list logo
