[Winpcap-users] Multiple NICs

Gianluca Varenni gianluca.varenni at cacetech.com
Wed Nov 4 07:54:48 PST 2009

  ----- Original Message ----- 
  From: Coleman Brumley 
  To: 'Gianluca Varenni' ; winpcap-users at winpcap.org 
  Sent: Wednesday, November 04, 2009 7:47 AM
  Subject: RE: [Winpcap-users] Multiple NICs

  Even if Wireshark is running on the same PC with the two applications, it won't see the traffic then?

That doesn't matter. 


  Is the traffic not ever reaching the NDIS level on the PC?

Yes, the traffic is completely managed by the TCP/IP stack driver, which sits at the top of the NDIS stack.



  From: Gianluca Varenni [mailto:gianluca.varenni at cacetech.com] 
  Sent: Wednesday, November 04, 2009 10:44 AM
  To: coleman.brumley at jandasoft.biz; winpcap-users at winpcap.org
  Subject: Re: [Winpcap-users] Multiple NICs


  If the two applications run on the same PC, even if bound to two different IP addresses assigned to two different NICs, the traffic will not hit the wire at all. The traffic between the two applications is routed directly by the TCP/IP stack, and will not reach the NIC card.


  Hope this helps



    ----- Original Message ----- 

    From: Coleman Brumley 

    To: winpcap-users at winpcap.org 

    Sent: Wednesday, November 04, 2009 7:06 AM

    Subject: [Winpcap-users] Multiple NICs




    I have a scenario where I have multiple NICs installed in my PC.  I have 2 applications running, each bound to a separate NIC/IP Address and sending UDP traffic between the two applications.


    When attempting to capture this traffic, though, Wireshark is only capturing broadcasts.  Is there some issue when capturing this type of traffic on the same PC?  


    Best Regards,





    Winpcap-users mailing list
    Winpcap-users at winpcap.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20091104/db016325/attachment.htm 

More information about the Winpcap-users mailing list