Loris,
thank you for your answer. Actually what I do is just
transparent forwarding Ethernet packets without
changes (but, sometimes with delays). So, all MAC 
addresses in outgoing packets are the same as ones 
in incoming packets. So, though my best wish was
disabling catching outgoing packets (that needs
modification of the driver, as you pointed out),
I thought that it could be a simple method (flag in
some place?) to find out whether a packet is sent or
received from the network.

Another question. Now I've added changing source MAC
address before sending the pocket and everything 
works. But I have not found a good way to find the
MAC address of the adapter. The only way I've found 
is to use NITBIOS (NCBENUM + NCBRESET + NCBASTAT
commands) but:
- it works only if NETBIOS installed
- I am not sure about correct correspondence
  between WinPcap adapters, BIOS enum numbers and
BIOS LANA numbers.
Is there a better way th obtain adapters MAC address?

   Regards,
                 Michael Furman


--- Loris Degioanni <[EMAIL PROTECTED]>
wrote:
> Hi,
> 
> 
> > Hi,
> > I am trying to use Paket.dll interface for
> > sending/receiving raw packets. And it seems that
> when
> > I use PacketReceivePacket in promiscuous mode I
> get
> > not only packets receded from the network but also
> > ones that are being sent from my computer
> (including
> > packets that I sent using PacketSendPacket.
> > - Am I correct?
> 
> Yes, for details look at
>
http://www.mail-archive.com/[EMAIL PROTECTED]/msg00064.html.
> 
> > - Is there any way (besides checking mac
> addresses, IP
> > etc.) to find out whether a pocket is incoming or
> > outgoing?
> 
> As far as I know, this is the simplest method.
> 
> Loris
> 
> >     Thanks in advance,
> >                 Regards,
> >                          Michael Furman
> >
> 
> 
> 
>
==================================================================
>  This is the WinPcap users list. It is archived at
> 
>
http://www.mail-archive.com/[EMAIL PROTECTED]/
> 
>  To unsubscribe use 
>  mailto:
>
[EMAIL PROTECTED]
>
==================================================================


__________________________________________________
Do you Yahoo!?
Yahoo! Web Hosting - establish your business online
http://webhosting.yahoo.com


==================================================================
 This is the WinPcap users list. It is archived at
 http://www.mail-archive.com/[EMAIL PROTECTED]/

 To unsubscribe use 
 mailto: [EMAIL PROTECTED]
==================================================================

Reply via email to