[Winpcap-users] Stop getting packets

Guy Harris guy at alum.mit.edu
Wed May 24 07:49:14 GMT 2006

Pelles, Noam wrote:

> I get messages like who is X.X.X.X tell Y.Y.Y.Y.

If you mean WinDump is printing "who is X.X.X.X tell Y.Y.Y.Y", that means
that WinPcap *is* getting packets - ARP "messages" are packets, and
constitute network activity.

ARP packets are often sent as broadcasts, so what might be happening is
that you're not getting any non-broadcast packets, other than traffic sent
to or from the machine running WinDump, after a certain amount of time. 
Is the machine running WinDump plugged into a switched network?

More information about the Winpcap-users mailing list