Zemer Margolin wrote:
I am currently working on a converter that converts captured packets from one
format to another.
One way to do that might be to contribute to Ethereal:
http://www.ethereal.com/
code to read the format from which you're converting - Ethereal has a
limited ability to
We have a machine in our datacenter that started stealing
ARP's request once we installed WinpCap and Traffic Statistic (http://www.trafficstatistic.com).
Marcel Bartels the authorassures me it not related to his
application thus I'm wondering if any othe WinPCap users have heard of
this.
Matthew,
WinPcap by itself is not able at all to answer to ARP requests: winpcap is a
packet library that receives and sends raw traffic. An application that uses
WinPcap could answer to ARP requests, by I think this is not your case,
because it looks that the problems persists even if you
Alex,
Hello,
I am building the application that must capture high volume
of packets on several network devices with intensive variable load.
On LINUX I can use pcap_get_selectable_fd and then use
select to work with several devices in one thread.
On Windows I have to run a
Hi Loris,
Thanks or your help, much appreciated.
The wierd thing is the problem occured within 10 minutes of installing
WinPCap and trafficstatstic, with no other configuration changes on the
machine.
Is it not possible that there is some undocumented windows registry setting
that could have
Pardon me for jumping in, but if you're trying to keep traffic
statistics while connected to a switch port (as opposed to a hub),
how does your traffic statistic program convince the switch to
forward all of the network's packets to its port? I am far
from expert in this area, but it seems to me
-Original Message-
From: Zemer Margolin [mailto:[EMAIL PROTECTED]
Sent: luned 29 novembre 2004 13.06
To: [EMAIL PROTECTED]
Subject: RE: [WinPcap-users] Pcap file format
Gui,
Thanks for your help and quick response.
I believe the information at
Matthew,
Switcheskeep
track of which mac addresses are on which port for that switch, i.e. you
havea table on the switch of mac address/port. It's possible that
thereare two entries in the switch table for the samemac address but
different port. This could happen if you switched a mac
