[Winpcap-users] Multiple NICs

Coleman Brumley coleman.brumley at jandasoft.biz
Wed Nov 4 07:47:12 PST 2009

Even if Wireshark is running on the same PC with the two applications, it
won't see the traffic then?


Is the traffic not ever reaching the NDIS level on the PC?


From: Gianluca Varenni [mailto:gianluca.varenni at cacetech.com] 
Sent: Wednesday, November 04, 2009 10:44 AM
To: coleman.brumley at jandasoft.biz; winpcap-users at winpcap.org
Subject: Re: [Winpcap-users] Multiple NICs


If the two applications run on the same PC, even if bound to two different
IP addresses assigned to two different NICs, the traffic will not hit the
wire at all. The traffic between the two applications is routed directly by
the TCP/IP stack, and will not reach the NIC card.


Hope this helps



----- Original Message ----- 

From: Coleman Brumley <mailto:coleman.brumley at jandasoft.biz>  

To: winpcap-users at winpcap.org 

Sent: Wednesday, November 04, 2009 7:06 AM

Subject: [Winpcap-users] Multiple NICs




I have a scenario where I have multiple NICs installed in my PC.  I have 2
applications running, each bound to a separate NIC/IP Address and sending
UDP traffic between the two applications.


When attempting to capture this traffic, though, Wireshark is only capturing
broadcasts.  Is there some issue when capturing this type of traffic on the
same PC?  


Best Regards,





Winpcap-users mailing list
Winpcap-users at winpcap.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20091104/d13b8814/attachment-0001.htm 

More information about the Winpcap-users mailing list