[Winpcap-users] Is is possible to receive EAP packet without
bugtraq at 163.com
Mon Sep 25 04:14:45 GMT 2006
I found a way to receive EAP packets with winpcap but not in promiscuous mode.
Just modify the source code of pcap_open_live() to call
PacketSetHwFilter() with parameter (NDIS_PACKET_TYPE_DIRECTED | NDIS_PACKET_TYPE_ALL_MULTICAST).
In non-promiscuous mode, the parameter passed to PacketSetHwFilter() by
pcap_open_live() is NDIS_PACKET_TYPE_ALL_LOCAL, which doesn't include
the EAP multicast packets.
Here is the related article:
On Thu, 21 Sep 2006 10:28:24 +0300
Vasily Borovyak <vbor at isd.dp.ua> wrote:
> Promiscuous mode allows the NIC to receive packets assigned for all
> other NICs.
> Without promiscuous mode the NIC will receive packets assigned to its
> own the MAC addr. only.
> bugtraq wrote:
> > Hi,
> > I want to use Winpcap to implement a 802.1x client.
> > The client must be able to receive EAP packet from switch.
> > For Cisco switches, the destination MAC Address of EAP packet is 01-80-C2-00-00-02.
> > In order to receive such packets, shall I set the Winpcap to work in promiscuous mode?
> > In other words, is there a way to receive such EAP packets without
> > promiscuous mode(with winpcap or other libraries)?
> > thanks.
> Best regards. Vasily Borovyak <vbor at isd.dp.ua>
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
bugtraq <bugtraq at 163.com>
More information about the Winpcap-users