[Winpcap-users] Multiple NICs

[Gianluca Varenni]

  ----- Original Message ----- 
  From: Coleman Brumley 
  To: 'Gianluca Varenni' ; winpcap-users at winpcap.org 
  Sent: Wednesday, November 04, 2009 7:47 AM
  Subject: RE: [Winpcap-users] Multiple NICs


  Even if Wireshark is running on the same PC with the two applications, it won't see the traffic then?



That doesn't matter. 

   

  Is the traffic not ever reaching the NDIS level on the PC?



Yes, the traffic is completely managed by the TCP/IP stack driver, which sits at the top of the NDIS stack.



GV

   

  From: Gianluca Varenni [mailto:gianluca.varenni at cacetech.com] 
  Sent: Wednesday, November 04, 2009 10:44 AM
  To: coleman.brumley at jandasoft.biz; winpcap-users at winpcap.org
  Subject: Re: [Winpcap-users] Multiple NICs

   

  If the two applications run on the same PC, even if bound to two different IP addresses assigned to two different NICs, the traffic will not hit the wire at all. The traffic between the two applications is routed directly by the TCP/IP stack, and will not reach the NIC card.

   

  Hope this helps

  GV

   

    ----- Original Message ----- 

    From: Coleman Brumley 

    To: winpcap-users at winpcap.org 

    Sent: Wednesday, November 04, 2009 7:06 AM

    Subject: [Winpcap-users] Multiple NICs

     

    Hello.

     

    I have a scenario where I have multiple NICs installed in my PC.  I have 2 applications running, each bound to a separate NIC/IP Address and sending UDP traffic between the two applications.

     

    When attempting to capture this traffic, though, Wireshark is only capturing broadcasts.  Is there some issue when capturing this type of traffic on the same PC?  

     

    Best Regards,

    Coleman

     

     


----------------------------------------------------------------------------

    _______________________________________________
    Winpcap-users mailing list
    Winpcap-users at winpcap.org
    https://www.winpcap.org/mailman/listinfo/winpcap-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20091104/db016325/attachment.htm