[Windump] Cant sniff

Janne Ruohomäki janne.ruohomaki at gmail.com
Wed Oct 3 00:51:36 PDT 2007


On 9/28/07, Gianluca Varenni <gianluca.varenni at cacetech.com> wrote:
> ----- Original Message -----
> From: "Janne Ruohomäki" <janne.ruohomaki at gmail.com>
> To: "Gianluca Varenni" <gianluca.varenni at cacetech.com>
> Cc: <windump at winpcap.org>
> Sent: Friday, September 28, 2007 2:53 AM
> Subject: Re: [Windump] Cant sniff
>
>
> > Actually I figured out this limitation originates from crappy windows.
>
> I wouldn't consider this a "limitation from crappy windows". The reason why
> you cannot sniff localhost packets is that packets do not go to the network
> card at all. "localhost" is an IP concept, and localhost packets under
> windows (like other OSes, as well) are managed in the TCP/IP protocol
> driver. WinPcap sits in parallel to TCP/IP. The reason why linux and other
> OSes have the "lo" interface is that they have a hook inside the TCP/IP
> kernel code to sniff such packets.


 And you dont consider this a "limitation from crappy windows" exactly
why ? Or is it just another feature ?

 You work for M$ or what ?

 And btw: M$ has its own "lo" interface. I tried it already, but did
it work? Can you guess ? ;)

 So by now windows has this crappy limitation to which they offer
crappy fix that does not work. Nice job!

>
> Just my two cents
> GV

  Just my employees 1000 euros...




More information about the Windump mailing list