[Winpcap-users] Is is possible to receive EAP packet without promiscuous mode?

[bugtraq]

I found a way to receive EAP packets with winpcap but not in promiscuous mode.

Just modify the source code of pcap_open_live() to call
PacketSetHwFilter() with parameter (NDIS_PACKET_TYPE_DIRECTED | NDIS_PACKET_TYPE_ALL_MULTICAST).

In non-promiscuous mode, the parameter passed to PacketSetHwFilter() by
pcap_open_live() is NDIS_PACKET_TYPE_ALL_LOCAL, which doesn't include
the EAP multicast packets.

Here is the related article:
http://www.ndis.com/faq/QA01060501.htm


On Thu, 21 Sep 2006 10:28:24 +0300
Vasily Borovyak <vbor at isd.dp.ua> wrote:

> No.
> 
> Promiscuous mode allows the NIC to receive packets assigned for all 
> other NICs.
> Without promiscuous mode the NIC will receive packets assigned to its 
> own the MAC addr. only.
> 
> 
> bugtraq wrote:
> > Hi,
> >
> > I want to use Winpcap to implement a 802.1x client.
> > The client must be able to receive EAP packet from switch.
> > For Cisco switches, the destination MAC Address of EAP packet is 01-80-C2-00-00-02.
> > In order to receive such packets, shall I set the Winpcap to work in promiscuous mode?
> >
> > In other words, is there a way to receive such EAP packets without
> > promiscuous mode(with winpcap or other libraries)?
> >
> > thanks.
> >
> >
> >
> >   
> 
> -- 
> Best regards. Vasily Borovyak <vbor at isd.dp.ua>
> 
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
> https://www.winpcap.org/mailman/listinfo/winpcap-users

-- 
bugtraq <bugtraq at 163.com>