Dear winpcap team: I'd like to suggest an improvement in the Win32 version of pcap_open_live (we currently are calling the packet.dll functions directly to achieve the same effect):
If the adapter isn't being opened in promiscuous mode (!promisc), then the hardware filters should be minimally set to: (NDIS_PACKET_TYPE_BROADCAST | NDIS_PACKET_TYPE_DIRECTED | NDIS_PACKET_TYPE_ALL_LOCAL) Currently, the winpcap code sets this to just NDIS_PACKET_TYPE_ALL_LOCAL. We have found that we couldn't receive an ARP broadcast packet unless we also set NDIS_PACKET_TYPE_BROADCAST. To support multicast or IPv6 (which requires support for multicast), then in addition to these hardware filters, you also need to set: NDIS_PACKET_TYPE_MULTICAST Thanks. - Ed Remmell Treck, Inc. (formerly Elmic Systems, USA) Best of Show Winner, ESC 2003 -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.300 / Virus Database: 265.6.12 - Release Date: 1/14/2005 --- Treck, Inc. - Confidentiality Notice This electronic transmission may contain information that is proprietary or confidential. You are hereby notified that any dissemination, distribution or duplication of this electronic transmission to some other entity, without the expressed written consent of Treck, Inc. is strictly prohibited, unless the contents of this electronic transmission specifically authorizes you to do so. If your receipt of this electronic transmission is in error, please notify the corporate offices of Treck, Inc. immediately by calling (513) 528-5732, or by reply to this transmission. ================================================================= This is the WinPcap users list. It is archived at http://www.mail-archive.com/winpcap-users@winpcap.polito.it/ To unsubscribe use mailto: [EMAIL PROTECTED] =================================================================
