Dear winpcap team:

I'd like to suggest an improvement in the Win32 version of pcap_open_live
(we currently are calling the packet.dll functions directly to achieve the
same effect):

If the adapter isn't being opened in promiscuous mode (!promisc), then the
hardware filters should be minimally set to:


Currently, the winpcap code sets this to just NDIS_PACKET_TYPE_ALL_LOCAL. We
have found that we couldn't receive an ARP broadcast packet unless we also

To support multicast or IPv6 (which requires support for multicast), then in
addition to these hardware filters, you also need to set:


- Ed Remmell

Treck, Inc. (formerly Elmic Systems, USA)

Best of Show Winner, ESC 2003

No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 265.6.12 - Release Date: 1/14/2005

Treck, Inc. -  Confidentiality Notice
This electronic transmission may contain information that is proprietary or 
confidential.  You are hereby notified that any dissemination, distribution or 
duplication of this electronic transmission to some other entity, without the 
expressed written consent of Treck, Inc.  is strictly prohibited, unless the 
contents of this electronic transmission specifically authorizes you to do so.  
If your receipt of this electronic transmission is in error, please notify the 
corporate offices of Treck, Inc.  immediately by  calling (513) 528-5732, or by 
reply to this transmission.

================================================================= This is the 
WinPcap users list. It is archived at

 To unsubscribe use

Reply via email to