sniffer in promiscuous mode

From: Siddharta Govindaraj (govind@iiitb.ac.in)
Date: 02/05/02 

From: "Siddharta Govindaraj" <govind@iiitb.ac.in>
To: <security-basics@securityfocus.com>
Date: Tue, 5 Feb 2002 20:34:22 +0530

Hi,

I have a funny problem with the ethereal packet sniffer. It correctly
captures all packets entering or leaving my interface, but in promiscuous
mode, it only seems to capture ARP, NETBIOS, IPX, RIP and such protocols,
and never seems to get any UDP or TCP packets ! I have tried other sniffers,
and they all exhibit the same behaviour, so I dont think its a sniffer
problem. Is there something else I have to do to capture TCP packets ? Or
could it be something to do with Wincap ?

Thanks
Siddharta

Relevant Pages

  • Re: OT--sniffer s-ware
    ... Well a sniffer won't help if no one knows the password (none of the packets you capture will have the password in them). ... I'd reset the WRT54G and flash the firmware with one of the Linux ones. ...
    (alt.sys.pc-clone.dell)
  • RE: sniffer in promiscuous mode
    ... need to do to get tcp packets, oh and check your filters too, good luck. ... I have a funny problem with the ethereal packet sniffer. ... Is there something else I have to do to capture TCP packets? ...
    (Security-Basics)
  • Re: Strange TCP Traffic
    ... I quickly set up a sniffer and this is the output I got. ... Are there corresponding "inbound" packets from the external network which are ... did you get a capture of the incoming packets which you can post? ...
    (comp.security.firewalls)
  • Re: Update: UDP 770 Potential Worm
    ... > were no packets indicating some form of replication. ... > my capture was limited due to the switched ... to see if the problem occurs on the test network, ... The proxy had already been isolated from the ...
    (Incidents)
  • Re: Continuous internet activity
    ... IP address out of the exercise (dest address for the packets). ... starts the capture. ... Wireshark is not running, and then it is "safe" to transmit ... There is a small probability of a networking problem, ...
    (alt.comp.hardware.pc-homebuilt)