[Winpcap-users] My NIC is redirecting/replicatingpacketswhensniffing

Fish fish at infidels.org
Thu Oct 30 13:45:26 GMT 2008


 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jim Young wrote:

<snip>
> The question is WHY your workstation would be sending these 
> ICMP redirects?
<snip>

You might also want to check whether you (either accidentally or on
purpose) have "IP Forwarding" (i.e. "IP Routing") enabled on your
Windows host:

   ipconfig -all

     Windows IP Configuration

        Host Name . . . . . . . . : foobar2
        Primary Dns Suffix  . . . :
        Node Type . . . . . . . . : Hybrid
        IP Routing Enabled. . . . : No    <<<<  look here  <<<<
        WINS Proxy Enabled. . . . : No

        ...<snip>...


Check the following registry entry:

  [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]
  "IPEnableRouter"="0"

If "IPEnableRouter" is set to "1", then IP Routing is enabled. If you
don't need it, disable it (set it to "0").

(But if you have a real router on your network then why would you
ever want IP Routing enabled?!)

- -- 
"Fish" (David B. Trout) - fish at softdevlabs.com
Fight Spam! Join CAUCE! <http://www.cauce.org/>
7 reasons why HTML email is a bad thing
http://www.georgedillon.com/web/html_email_is_evil.shtml
PGP key fingerprints:
RSA: 6B37 7110 7201 9917 9B0D 99E3 55DB 5D58 FADE 4A52
DH/DSS: 9F9B BAB0 BA7F C458 1A89 FE26 48F5 D7F4 C4EE 3E2A

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.1

iQA/AwUBSQm6dUj11/TE7j4qEQKxmwCfYjwQ/jgC97L9MDKkAdnIoCAXmEgAoMpj
vsK8YVnkrAPju/AfTxejJU24
=gZVC
-----END PGP SIGNATURE-----



More information about the Winpcap-users mailing list