RES: RES: [Winpcap-users] Mirroring and winpcap
    Cristian Gallas 
    cristian.gallas at ivirtua.com.br
       
    Mon Aug 29 03:35:01 GMT 2005
    
    
  
> >	Look the code, the only reference I use to brings 
> promiscuous mode, is 
> >the [1] on parameter to pcap_open, if need do something difference, 
> >maybe is my mistake.
> >
> >      FAdapter := pcap_open(PChar(l_Device),
> >        WTAP_MAX_PACKET_SIZE, // Capture entire packet //
> >        1, // Promiscuous mode      //
> >        20, // Read timeout          //
> >        @l_auth, // Autenticação remota   //
> >        @errbuf);
> >  
> >
> The WinPcap documentation seems to suggest that your call 
> should be putting the adapter into promiscuous mode.
> However, there are two differences between the call you're 
> making and the call Ethereal makes:
> 
>     1) Ethereal calls pcap_open_live(), not pcap_open();
>     2) the code that Ethereal uses to call pcap_open_live() is in C.
> 
> Either of those might be the cause of the problem you're seeing.
	I already change to pcap_open_live and the problem is the same, is
so strange, my program works perfect, the problem persist only when computer
has two active adapters, and second adapter receive a mirror.	
	Thanx be the same
    
    
More information about the Winpcap-users
mailing list