[WinPcap-users] does winpcap work with adapter with multiple IP addresses?

2004-04-19 Thread Jinhai Yang
I'm looking at set up proper filter rules for an adapter with two IP addresses. My question is: Does winpcap work with adapter with multiple IP addresses? I looked at the code, seems to me pcap_lookupnet() and pcap_compile() both assume one IP address per adapter. In the windump code(tcpdump.c)

Re: [WinPcap-users] Winpcap 3.1 beta: Problem with packet length and captured length

2004-04-19 Thread Gianluca Varenni
On Mon, 19 Apr 2004 08:32:55 -0700 "Pawan Singh" <[EMAIL PROTECTED]> wrote: I read about "offload TCP segmentation". Does winpcap capture packets before or after segmentation? Before, since segmentation is done on the NIC itself. Have a nice day GV Pawan Singh [EMAIL PROTECTED] 650 776 3958

RE: [WinPcap-users] Winpcap 3.1 beta: Problem with packet length and captured length

2004-04-19 Thread Pawan Singh
I read about "offload TCP segmentation". Does winpcap capture packets before or after segmentation? Pawan Singh [EMAIL PROTECTED] 650 776 3958 -Original Message- From: Gianluca Varenni [mailto:[EMAIL PROTECTED] Sent: Monday, April 19, 2004 4:58 AM To: [EMAIL PROTECTED] Subject: Re: [WinP

Re: [WinPcap-users] WinPcap & NMap

2004-04-19 Thread Gisle Vanem
"Alan S. Jones" <[EMAIL PROTECTED]> said: > I have been watching some of the WinPcap 3.1 beta development along with > NMap development. At one point I ran into some problems with NMap after I > upgraded to WinPcap 3.1 beta. Not figuring anything else out till I ran > across some comments that m

Re: [WinPcap-users] Winpcap 3.1 beta: Problem with packet length and captured length

2004-04-19 Thread Gianluca Varenni
Hi. We experienced a similar "problem" with one of our lab machines (using an intel server Fast Ethernet card). In practice some network cards (server nics, usually), are able to fragment outbound packets in smaller chunks (I don't know how, exactly), so they announce to protocol drivers (TCP-IP a

Re: [WinPcap-users] Problem to list packet with pcap_next_ex

2004-04-19 Thread Gianluca Varenni
Hi.   I'm not completely sure, because I don't know how the C_Paquet constructor works, but I think that the problem is that you are storing the pointer returned in pkt_data into your C_Paquet class. Unfortunately, this pointer is valid only up to the next call to pcap_next_ex (or pcap_close)

Re: [WinPcap-users] WinPcap & NMap

2004-04-19 Thread Gianluca Varenni
- Original Message - From: "Alan S. Jones" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, April 18, 2004 9:43 PM Subject: [WinPcap-users] WinPcap & NMap > > > I have been watching some of the WinPcap 3.1 beta development along with > NMap development. At one point I ran into

RE: [WinPcap-users] New WinPcap 3.1 beta functions.

2004-04-19 Thread Fulvio Risso
Hi Robert. You're right. You have to build WinPcap woth this option turned on (which is one of the variants of the project you can use to build the library). This is to keep the stricter compatibility with libpcap, which is causing us a lot of headache (libpcap does not have pcap_findalldevs_ex() a

[WinPcap-users] Capture on many interfaces with pcap

2004-04-19 Thread Andreas Rieke
Hi, I am using pcap/WinPcap to capture traffic on linux and windows operating systems. I need to work on several interfaces in parallel and expect high load, however, as the filter function should drop more than 99 percent of the traffic, receiving packets from pcap should not be the problem. My d

[WinPcap-users] WinPcap & NMap

2004-04-19 Thread Alan S. Jones
I have been watching some of the WinPcap 3.1 beta development along with NMap development. At one point I ran into some problems with NMap after I upgraded to WinPcap 3.1 beta. Not figuring anything else out till I ran across some comments that made me downgrade to WinPcap 3.0 and things seemed

[WinPcap-users] Problem to list packet with pcap_next_ex

2004-04-19 Thread Julien Seignalet
Hello all, First time I used this mailing list so hello all :) I program a c++ software to capture network traffic and analyze it so Winpcap is very useful :) But i got an issue with the pcap_next_ex function. I explain: In my code i analyze the paket as soon as they arrived and it works fin

[WinPcap-users] Winpcap 3.1 beta: Problem with packet length and captured length

2004-04-19 Thread Pawan Singh
Hi, I am using winpcap 3.1 beta. I am seeing IP packets on an 100 Mbit Ethernet segment which have IP header total length > 2000. This causes Winpcap library to return packet length and captured length to be greater equal to IP total length + Ethernet header length. Is this a bug in winpcap becau