[Winpcap-users] the ip address of the packets

[Gianluca Varenni]

Your gateway is acting as a NAT, and you are capturing the packets from the internet port. The NAT translates the private IP addresses of your LAN to the public one assigned to the public port of the gateway. If you capture the packets on the gateway port that goes to the LAN, you will see the IP address of the end system.

Have a nice day
GV
  ----- Original Message ----- 
  From: Prasanna Kumar Nelam 
  To: winpcap-users at winpcap.org 
  Sent: Thursday, March 26, 2009 4:42 AM
  Subject: [Winpcap-users] the ip address of the packets


   

  Hello,

   

  This is Prasanna kumar, I am working on winpcap library to capture the http packets.

  I have the doubt regarding packet ip address at the gateway. The scenario is like

  we have the LAN, and one gateway to provide the internet to total LAN.

  If I run the Winpcap application at one end system, EX: if I send http request to google, then the client ip address is my end system ip address and server ip address is google ip address.

  If I run the application at gateway and I raise the same http request from the end system, then client ip address is gateway public ip address and the server address is same, I am not getting end system ip address.

  Is there any reason to happen like this, Or any bug in my code, I am running the winpcap in promisious mode.  please help me in this issue.

   

  Thanks in advance. 

   

  Prasanna Kumar.N

   

  =============================================

   

  This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify the sender immediately by e-mail and delete this e-mail from your system.  The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company. Finally, the recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any attachment with this email. 
   
  IMImobile, Plot No:770, Road No : 44, Jubilee Hills, Hyderabad, India, 500033. www.imimobile.com 
  ==========================================================================================================================================================
  This e-mail message has been scanned for Viruses and Content and cleared by Symantec Mail Security
   

   



------------------------------------------------------------------------------


  _______________________________________________
  Winpcap-users mailing list
  Winpcap-users at winpcap.org
  https://www.winpcap.org/mailman/listinfo/winpcap-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20090331/6a51294f/attachment.htm