[Winpcap-users] Stop getting packets
    Guy Harris 
    guy at alum.mit.edu
       
    Wed May 24 07:49:14 GMT 2006
    
    
  
Pelles, Noam wrote:
> I get messages like who is X.X.X.X tell Y.Y.Y.Y.
If you mean WinDump is printing "who is X.X.X.X tell Y.Y.Y.Y", that means
that WinPcap *is* getting packets - ARP "messages" are packets, and
constitute network activity.
ARP packets are often sent as broadcasts, so what might be happening is
that you're not getting any non-broadcast packets, other than traffic sent
to or from the machine running WinDump, after a certain amount of time. 
Is the machine running WinDump plugged into a switched network?
    
    
More information about the Winpcap-users
mailing list