<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt"><DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif">no I have not , but i think i solved the problem. ( not completly but i understand when it happens).</DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif">( thogh it is 04:38 here and i kind of seing 01010010101 only).</DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"> </DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif">but here is what i think:</DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"> </DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"> when i send a packet to the network with my own MAC & IP , it works great.</DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"> when i send a packet to the network with fake MAC & fake IP other computers on the network </DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"> dont see this packet .</DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"> </DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"> when i send a packet to the network with my own MAC but FAKE IP , it works also and other computers see this packet on the network and the computer which needs to get this packet does get it !</DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"> </DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"> </DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"> so basically what i am saying is that other computers do not get packets that comes from fake MAC , </DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"> even if it is one of the MAC addresses that exsists on the net.</DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"> </DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"> I do not remember what an OS should do when it get a packet to it's IP when it comes from MAC it does not have in it's arp table. ( I assumed it should not care ) however i see that every time i spoof a mac the packet does not get to it's destination.</DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"> </DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif">thanks , </DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif">Eddie.</DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"> </DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"> </DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"> i am working with a simple linksys AP , no security features, no wep or other encryption.<BR><BR>does anyone know if this is somekind of defense method ? should a computer compare each packets src mac ? </DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif">is the AP checking for MAC spoofing by default ? </DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"> </DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"> </DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif">----- Original Message ----<BR>From: Gianluca Varenni <gianluca.varenni@cacetech.com><BR>To: winpcap-users@winpcap.org<BR>Sent: Tuesday, January 30, 2007 3:28:33 AM<BR>Subject: Re: [Winpcap-users] send packet to the network problem.<BR><BR>
<STYLE type=text/css>DIV {
MARGIN:0px;}
</STYLE>
<DIV><FONT size=2>Have you tried running the same tx application on a wired ethernet adapter and see if the other end receives it?</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>Have a nice day</FONT></DIV>
<DIV><FONT size=2>GV</FONT></DIV>
<BLOCKQUOTE style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV style="BACKGROUND: #e4e4e4; FONT: 10pt arial"><B>From:</B> <A title=eddie_harari@yahoo.com href="mailto:eddie_harari@yahoo.com" target=_blank rel=nofollow>eddie harari</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=winpcap-users@winpcap.org href="mailto:winpcap-users@winpcap.org" target=_blank rel=nofollow>winpcap-users@winpcap.org</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Monday, January 29, 2007 3:23 PM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> [Winpcap-users] send packet to the network problem.</DIV>
<DIV><BR></DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif">
<DIV>Hi all , </DIV>
<DIV></DIV>
<DIV> I have winpcap installed on cygwin ( win XP sp II platform ) .</DIV>
<DIV> everything works fine , and i can even monitor my wireless network ( with my HP laptop built in WIFI connection ).</DIV>
<DIV> </DIV>
<DIV> My problem is as follows:</DIV>
<DIV> </DIV>
<DIV> 1. I am not sure that i am able to send packets on this card using winpcap.</DIV>
<DIV> </DIV>
<DIV> I am able to make a packet buffer which is a correct sequance of bytes containing the Ethernet 14 byte header , the IP header and the ICMP header and data ( echo request ).</DIV>
<DIV> </DIV>
<DIV> however, when i run a sniffer on the destination to see if it gets my packet, i see nothing. ( I dont get the packet on the destination.</DIV>
<DIV> </DIV>
<DIV> when i sniff the network on the host that sends the packet ( my laptop ) , I see the packet and I see that the packet is correct ( headers ,checksums etc...).</DIV>
<DIV> </DIV>
<DIV> I am not sure if i should be able to do that on a wi-fi connection or not ?</DIV>
<DIV> </DIV>
<DIV> Is there a way to insert such packet to the wi-fi network using winpcap ? </DIV>
<DIV> I was able to do that using RAW Socket interface , but i much prefer the win pcap interface...</DIV>
<DIV> </DIV>
<DIV> thanks , </DIV>
<DIV> </DIV>
<DIV> Eddie.</DIV>
<DIV> </DIV></DIV><BR>
<HR SIZE=1>
8:00? 8:25? 8:40? <A href="http://tools.search.yahoo.com/shortcuts/?fr=oni_on_mail&#news" target=_blank rel=nofollow>Find a flick</A> in no time<BR>with the<A href="http://tools.search.yahoo.com/shortcuts/?fr=oni_on_mail&#news" target=_blank rel=nofollow>Yahoo! Search movie showtime shortcut.</A>
<P>
<SPAN style="width:100%;height:2px;border-bottom:1px solid rgb(212,208,200); border-top:1px solid rgb(128,128,128);background-color:black;overflow:hidden; margin:8px 0px;"></SPAN>
<P></P>_______________________________________________<BR>Winpcap-users mailing list<BR>Winpcap-users@winpcap.org<BR>https://www.winpcap.org/mailman/listinfo/winpcap-users<BR></BLOCKQUOTE>
<DIV>_______________________________________________<BR>Winpcap-users mailing list<BR>Winpcap-users@winpcap.org<BR><A href="https://www.winpcap.org/mailman/listinfo/winpcap-users" target=_blank>https://www.winpcap.org/mailman/listinfo/winpcap-users</A></DIV></DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"><BR></DIV></div><br>
<hr size=1>Everyone is raving about <a href="http://us.rd.yahoo.com/evt=45083/*http://advision.webevents.yahoo.com/mailbeta">the all-new Yahoo! Mail beta.</a></body></html>