[Winpcap-users] working with a network tap - possible?

Gianluca Varenni gianluca.varenni at cacetech.com
Thu Mar 27 20:52:40 GMT 2008

You do exactly as you said: use two NICs, and capture from both of them, aggregating the packets coming from them.

Alternatively, I think there are taps that can aggregate the traffic in the two directions into a single "mirrored" port.

Have a nice day
  ----- Original Message ----- 
  From: Athir Nuaimi 
  To: winpcap-users at winpcap.org 
  Sent: Thursday, March 27, 2008 1:36 PM
  Subject: [Winpcap-users] working with a network tap - possible?

  Hello.  I have a voip monitoring application that my team has created.  At this point we are using a SPAN (mirror) port on the switch to listen to the traffic.  Is it possible to use a network tap with winpcap?  I assume that winpcap sees the network as two separate network interfaces.  Do I just need to open both interfaces and then in my software merge the packets into the same stream?  Or is there more to it than that?


  Thanks in advance



  Winpcap-users mailing list
  Winpcap-users at winpcap.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20080327/5219f4fd/attachment.htm

More information about the Winpcap-users mailing list