Depends. IIRC the NIC may be in promiscuous mode and pass all packets up the stack, but the firewall sits between it and the application. Hence packets will be filtered. I can't test this at work to verify as we have the firewall controlled by a group policy, but I can check when I get home.
Randy Grein Network Engineer "Keith French" <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 06/28/2007 08:27 AM Please respond to Community support list for Wireshark <wireshark-users@wireshark.org> To "Wireshark-Users" <wireshark-users@wireshark.org> cc Subject [Wireshark-users] Packet Capture & Personal Firewalls I thought this did not matter as Wireshark puts the NIC card in promiscuous mode and hence the IP address of the PC is irrelevant unless you want to things such as pings. However, some people think otherwise. Are there any problems doing a capture on a WinXP machine that has a personal firewall such as ZoneAlarm running on it? _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users - ------------------------- CONFIDENTIALITY NOTICE: The information in this message may be proprietary and/or confidential, and is intended only for the use of the individual(s) to whom this email is addressed. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to this email and deleting this email from your computer. Nothing contained in this email or any attachment shall satisfy the requirements for contract formation or constitute an electronic signature. _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
