Hi,<div><br></div><div>I've checked that OID_GEN_CURRENT_PACKET_FILTER is supported in NDIS5 and NDIS_PACKET_TYPE_PROMISCUOUS an available filter. So it should be OK to let WinPcap put my WLAN NIC in promiscuous mode on Windows XP.</div>
<div><br></div><div>But when I configure the WLAN NIC into promiscuous mode (using WireShark) and press start, a dialog pops up with error message: The capture session could not be initiated (failed to set hardware filter to promiscuous mode).</div>
<div><br></div><div>Would you give me a suggestion?</div><div><br></div><div>Thanks.</div><div>Haich</div><div><br><br><div class="gmail_quote">On Tue, Sep 1, 2009 at 11:14 PM, Gianluca Varenni <span dir="ltr"><<a href="mailto:gianluca.varenni@cacetech.com" target="_blank">gianluca.varenni@cacetech.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#ffffff">
<div><font size="2">What you are reading is the documentation for an NDIS 6.0
driver. WinPcap is still an NDIS 5.x one, so the </font><font size="3">NDIS_PACKET_TYPE_802_11_xxxx filters are not usable from WinPcap. I don't
know exactly what the NDIS 5x <--> 6.0 thunking layer does when you set
the promiscuous mode, however.</font></div>
<div><font size="2"></font> </div>
<div><font size="2">GV</font></div>
<blockquote style="padding-right:0px;padding-left:5px;margin-left:5px;border-left:#000000 2px solid;margin-right:0px"><div><div></div><div>
<div style="font:10pt arial">----- Original Message ----- </div>
<div style="background:#e4e4e4;font:10pt arial"><b>From:</b>
<a title="haich.woo@gmail.com" href="mailto:haich.woo@gmail.com" target="_blank">yu-ruei woo</a>
</div>
<div style="font:10pt arial"><b>To:</b> <a title="winpcap-users@winpcap.org" href="mailto:winpcap-users@winpcap.org" target="_blank">winpcap-users@winpcap.org</a> </div>
<div style="font:10pt arial"><b>Sent:</b> Monday, August 31, 2009 11:10
PM</div>
<div style="font:10pt arial"><b>Subject:</b> Re: [Winpcap-users] What does
WinPcap do when setting a 802.11wireless NIC into promiscuous mode?</div>
<div><font size="2"></font><font size="2"></font><font size="2"></font><br></div>Hi,
<div><font size="2"></font><font size="2"></font><font size="2"></font><br></div>
<div>After tracing the source code, I found that in PacketSetHwFilter,
you set the packet filter NDIS_PACKET_TYPE_PROMISCUOUS is true. Otherwise
the packet filter is set to NDIS_PACKET_TYPE_ALL_LOCAL.</div>
<div><font size="2"></font><font size="2"></font><font size="2"></font><br></div>
<div>In the WDK documentation, it says:</div>
<div>It is only valid for the miniport driver to enable the
NDIS_PACKET_TYPE_PROMISCUOUS, NDIS_PACKET_TYPE_802_11_PROMISCUOUS_MGMT, or
NDIS_PACKET_TYPE_802_11_PROMISCUOUS_CTRL packet filters if the driver is
operating in Network Monitor (NetMon) mode.<br><br></div>
<div>But in the source code, I can't find any request to the driver that sets
its operation mode to NetMon mode.</div>
<div><font size="2"></font><font size="2"></font><font size="2"></font><font size="2"></font><br></div>
<div>So I think setting promiscuous mode in WireShard will have to effect on
the NIC if the NIC driver follows the WDK documentation.</div>
<div><font size="2"></font><font size="2"></font><br></div>
<div>Is that right?</div>
<div><br></div>
<div>Best regards, </div>
<div>Haich</div>
<div><br>
<div class="gmail_quote">On Tue, Sep 1, 2009 at 10:49 AM, yu-ruei woo <span dir="ltr"><<a href="mailto:haich.woo@gmail.com" target="_blank">haich.woo@gmail.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="padding-left:1ex;margin:0px 0px 0px 0.8ex;border-left:#ccc 1px solid"><span style="font-size:16px;font-family:Arial;border-collapse:collapse"><pre style="word-wrap:break-word">Hi,</pre>
<pre style="word-wrap:break-word">I am recently modifying a WLAN driver such that it can receive 802.11 packets without filtering packets destined to other STA in the same BSS while keep the connection with the BSS. </pre>
<pre style="word-wrap:break-word"><br></pre><pre style="word-wrap:break-word">I've tried the promiscuous mode, but I found that no OID is set to the WLAN driver to notify the driver that it should now operate in promiscuous mode.</pre>
<pre style="word-wrap:break-word"><br></pre><pre style="word-wrap:break-word">I would like to know what does WinPcap do when setting a WLAN NIC into promiscuous receiving mode. Specifically, how does WinPcap notify the WLAN NIC that it should operate in promiscuous mode.</pre>
<pre style="word-wrap:break-word"><br></pre><pre style="word-wrap:break-word">Best regards,</pre><pre style="word-wrap:break-word">Haich</pre></span></blockquote></div><br></div>
</div></div><p>
</p><hr>
<p></p>_______________________________________________<br>Winpcap-users
mailing
list<br><a href="mailto:Winpcap-users@winpcap.org" target="_blank">Winpcap-users@winpcap.org</a><br><a href="https://www.winpcap.org/mailman/listinfo/winpcap-users" target="_blank">https://www.winpcap.org/mailman/listinfo/winpcap-users</a><br>
<p></p></blockquote></div>
<br>_______________________________________________<br>
Winpcap-users mailing list<br>
<a href="mailto:Winpcap-users@winpcap.org" target="_blank">Winpcap-users@winpcap.org</a><br>
<a href="https://www.winpcap.org/mailman/listinfo/winpcap-users" target="_blank">https://www.winpcap.org/mailman/listinfo/winpcap-users</a><br>
<br></blockquote></div><br></div>