<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2800.1543" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=640173517-23052006><FONT face=Arial color=#0000ff
size=2>Hi,</FONT></SPAN></DIV>
<DIV><SPAN class=640173517-23052006><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=640173517-23052006><FONT face=Arial color=#0000ff size=2>I have
tried running windump on the blade server with the problematic behavior,
</FONT></SPAN></DIV>
<DIV><SPAN class=640173517-23052006><FONT face=Arial color=#0000ff size=2>and
spotted that first I get all the packets correct , then after few seconds I stop
getting</FONT></SPAN></DIV>
<DIV><SPAN class=640173517-23052006><FONT face=Arial color=#0000ff
size=2>packets ( don't see any network activity ) but getting tomes of ARP
messages that seem to be endless.</FONT></SPAN></DIV>
<DIV><SPAN class=640173517-23052006><FONT face=Arial color=#0000ff size=2>I
wonder if that is something related to the switch I use ( internal in the blade)
?</FONT></SPAN></DIV>
<DIV><SPAN class=640173517-23052006><FONT face=Arial color=#0000ff size=2>Is it
putting the switch into any other mode ?</FONT></SPAN></DIV>
<DIV><SPAN class=640173517-23052006><FONT face=Arial color=#0000ff size=2>This
scenario is happening each time I start windump.</FONT></SPAN></DIV>
<DIV><SPAN class=640173517-23052006><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=640173517-23052006><FONT face=Arial color=#0000ff size=2>Loris
- thanks for the good advise.</FONT></SPAN></DIV>
<DIV><SPAN class=640173517-23052006><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=640173517-23052006><FONT face=Arial color=#0000ff
size=2>Noam</FONT></SPAN></DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> winpcap-users-bounces@winpcap.org
[mailto:winpcap-users-bounces@winpcap.org] <B>On Behalf Of </B>Pelles,
Noam<BR><B>Sent:</B> Monday, May 22, 2006 9:09 AM<BR><B>To:</B>
winpcap-users@winpcap.org<BR><B>Subject:</B> RE: [Winpcap-users] Stop getting
packets<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV><SPAN class=968180506-22052006><FONT face=Arial color=#0000ff size=2>I am
developing in Visual studio.</FONT></SPAN></DIV>
<DIV><SPAN class=968180506-22052006><FONT face=Arial color=#0000ff size=2>Logs \
trace did not helped here , I think the the main problem is configuration -
all my applications works fine on any non blade servers !</FONT></SPAN></DIV>
<DIV><SPAN class=968180506-22052006><FONT face=Arial color=#0000ff size=2>Also -
I have the same problem with Ethereal when I am not showing packets in real time
.</FONT></SPAN></DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> winpcap-users-bounces@winpcap.org
[mailto:winpcap-users-bounces@winpcap.org] <B>On Behalf Of </B>Eric
Hansen<BR><B>Sent:</B> Sunday, May 21, 2006 3:19 PM<BR><B>To:</B>
winpcap-users@winpcap.org<BR><B>Subject:</B> Re: [Winpcap-users] Stop getting
packets<BR></FONT><BR></DIV>
<DIV></DIV>Are you developing in Visual Studio, or....?<BR><BR>If so, do a trace
(or whatever other method you like to debug) to see where the problem is in your
code.<BR><BR>
<DIV><SPAN class=gmail_quote>On 5/21/06, <B class=gmail_sendername>Pelles,
Noam</B> <<A
href="mailto:Noam.Pelles@verint.com">Noam.Pelles@verint.com</A>>
wrote:</SPAN>
<BLOCKQUOTE class=gmail_quote
style="PADDING-LEFT: 1ex; MARGIN: 0pt 0pt 0pt 0.8ex; BORDER-LEFT: rgb(204,204,204) 1px solid">
<DIV>
<DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN>Hi,</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN>I have posted a message few month ago , and
got reply suggesting to upgrade the WinPcap version to </SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN>3.1 ( I have used the beta version of
3.1).</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN>I have installed it few days ago and still
have the same problem ( copy from the last post) :</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN></SPAN></FONT> </DIV>
<DIV><FONT size=+0><SPAN>
<DIV><SPAN><FONT face=Arial size=2>I am writing a network sniffer that uses
WinPCap <SPAN> 3.1 Beta </SPAN>on Win 2000\2003 servers.<BR></FONT>
<DIV><SPAN><SPAN><FONT face=Arial size=2>This application works fine under any
server I have used till now,</FONT></SPAN></SPAN></DIV>
<DIV><SPAN><SPAN><FONT face=Arial size=2>but recently I have installed it on
blade server<SPAN> ( <FONT face=Verdana color=blue size=2><SPAN
style="FONT-SIZE: 10pt; COLOR: blue; FONT-FAMILY: Verdana">IBM blade centre
8677-3xa and <SPAN
style="FONT-SIZE: 10pt; COLOR: blue; FONT-FAMILY: Verdana">OPM Switch IBM
optical pass thru Module</SPAN> </SPAN></FONT> ) </SPAN>, and crossed
strange behavior :</FONT></SPAN></SPAN></DIV>
<DIV><SPAN><SPAN><FONT face=Arial size=2></FONT></SPAN></SPAN> </DIV>
<DIV><SPAN><SPAN><FONT face=Arial size=2>When my application starts it is
capturing packets <SPAN>for a </SPAN>period of time , then
packets stops for any reason.</FONT></SPAN></SPAN></DIV>
<DIV><SPAN><SPAN><FONT face=Arial size=2>When using other application that
uses WinPCap ( Packetyzer ) I get the same result ( even when their buffer is
not full).</FONT></SPAN></SPAN></DIV>
<DIV><SPAN><SPAN><FONT face=Arial size=2></FONT></SPAN></SPAN> </DIV>
<DIV><SPAN><SPAN>
<DIV><SPAN><SPAN><FONT face=Arial size=2>When I use Ethereal in regular mode(
not displaying packets in real time ) also the packets stops after few seconds
, only when I check the </FONT></SPAN></SPAN></DIV>
<DIV><SPAN><SPAN><FONT face=Arial size=2>option of " Update list of
packets in real time" packets are being captured all the
time.</FONT></SPAN></SPAN></DIV>
<DIV><SPAN><SPAN><SPAN><FONT face=Arial size=2>( I have got the answer that it
does nothing but in the UI but still it has effect !!!
).</FONT></SPAN></SPAN></SPAN></DIV></SPAN></SPAN></DIV></SPAN></DIV></SPAN></FONT><FONT
face=Arial size=2><SPAN></SPAN></FONT></DIV>
<DIV><FONT size=+0><SPAN>
<DIV><SPAN><FONT face=Arial size=2></FONT></SPAN> </DIV>
<DIV><SPAN><FONT face=Arial size=2></FONT></SPAN> </DIV>
<DIV><SPAN><SPAN><FONT face=Arial size=2>I have also written a small
application based exactly on the WinPCap docs , and it is also acting the same
( stopped getting packets after</FONT></SPAN></SPAN></DIV>
<DIV><SPAN><SPAN><FONT face=Arial size=2>few thousands of packets
).</FONT></SPAN></SPAN></DIV>
<DIV><SPAN><SPAN><FONT face=Arial size=2></FONT></SPAN></SPAN> </DIV>
<DIV><SPAN><SPAN><FONT face=Arial size=2>thanks</FONT></SPAN></SPAN></DIV>
<DIV><SPAN><SPAN><FONT face=Arial size=2></FONT></SPAN></SPAN> </DIV>
<DIV><SPAN><SPAN><FONT face=Arial size=2>Noam</FONT></SPAN></SPAN></DIV>
<DIV><SPAN><SPAN><FONT face=Arial size=2></FONT></SPAN></SPAN> </DIV>
<DIV><SPAN><SPAN><FONT face=Arial size=2></FONT></SPAN></SPAN> </DIV>
<DIV><SPAN><FONT face=Arial size=2></FONT></SPAN> </DIV>
<DIV><SPAN><SPAN><FONT face=Arial size=2></FONT></SPAN></SPAN> </DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: rgb(0,0,0) 2px solid; MARGIN-RIGHT: 0px"><FONT
face=Arial size=2></FONT> </BLOCKQUOTE></SPAN></FONT></DIV></DIV>
<TABLE>
<TBODY>
<TR>
<TD bgColor=#ffffff><FONT
color=#000000>__________________________________________________________________________________________<BR>This
electronic message contains information from Verint Systems, which may
be privileged and confidential. <BR>The information is intended to be
for the use of the individual(s)or entity named above. <BR>If you are
not the intended recipient, be aware that any disclosure, copying,
distribution or use of the contents of this information is prohibited.
<BR>If you have received this electronic message in error, please notify
us by replying to this email
(1).<BR><BR></FONT></TD></TR></TBODY></TABLE></DIV><BR>_______________________________________________<BR>Winpcap-users
mailing list<BR><A onclick="return top.js.OpenExtLink(window,event,this)"
href="mailto:Winpcap-users@winpcap.org">Winpcap-users@winpcap.org</A><BR><A
onclick="return top.js.OpenExtLink(window,event,this)"
href="https://www.winpcap.org/mailman/listinfo/winpcap-users"
target=_blank>https://www.winpcap.org/mailman/listinfo/winpcap-users</A><BR><BR><BR></BLOCKQUOTE></DIV><BR><BR
clear=all><BR>-- <BR>Mess with the best, die like the rest
<TABLE>
<TBODY>
<TR>
<TD bgColor=#ffffff><FONT
color=#000000>__________________________________________________________________________________________<BR>This
electronic message contains information from Verint Systems, which may be
privileged and confidential. <BR>The information is intended to be for the
use of the individual(s)or entity named above. <BR>If you are not the
intended recipient, be aware that any disclosure, copying, distribution or
use of the contents of this information is prohibited. <BR>If you have
received this electronic message in error, please notify us by replying to
this email (1).<BR><BR></FONT></TD></TR></TBODY></TABLE></BODY></HTML>
<table><tr><td bgcolor=#ffffff><font color=#000000>__________________________________________________________________________________________<br>
This electronic message contains information from Verint Systems, which may be privileged and confidential. <br>
The information is intended to be for the use of the individual(s)or entity named above. <br>
If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. <br>
If you have received this electronic message in error, please notify us by replying to this email (1).<br>
<br>
</font></td></tr></table>