[Winpcap-users] Stop getting packets

Pelles, Noam Noam.Pelles at verint.com
Wed May 24 08:57:30 GMT 2006



You are right, I get only broadcasts. I am connected through a blade
into a IBM pass thru copper switch.


-----Original Message-----
From: winpcap-users-bounces at winpcap.org
[mailto:winpcap-users-bounces at winpcap.org] On Behalf Of Guy Harris
Sent: Wednesday, May 24, 2006 10:49 AM
To: winpcap-users at winpcap.org
Subject: RE: [Winpcap-users] Stop getting packets

Pelles, Noam wrote:

> I get messages like who is X.X.X.X tell Y.Y.Y.Y.

If you mean WinDump is printing "who is X.X.X.X tell Y.Y.Y.Y", that
means that WinPcap *is* getting packets - ARP "messages" are packets,
and constitute network activity.

ARP packets are often sent as broadcasts, so what might be happening is
that you're not getting any non-broadcast packets, other than traffic
sent to or from the machine running WinDump, after a certain amount of
time.
Is the machine running WinDump plugged into a switched network?


_______________________________________________
Winpcap-users mailing list
Winpcap-users at winpcap.org
https://www.winpcap.org/mailman/listinfo/winpcap-users

__________________________________________________________________________________________
This electronic message contains information from Verint Systems, which may be privileged and confidential.
The information is intended to be for the use of the individual(s)or entity named above.
If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited.
If you have received this electronic message in error, please notify us by replying to this email (1).




More information about the Winpcap-users mailing list