The theme is anxious. . . Urgent: I would like to ask questions related to the network sniffing «Previous topic | Next Theme» NJICESHIHONG8
Published in: 2003-11-24 15:03 Reply Posting: 38 Points: 0 Registration: 2003-09-27 If the network card is set to mixed mode, the network sniffing in the shared network, why not listen to the machine Sended packet (can you hear a data package sent by other machines)? why is this happening? ? Antspower
Published in: 2003-11-24 16:14 Reply Posting: 5 Points: 0 Registration: 2003-11-19nJiceshihong8 Hello, your question, I don't know to answer: (But ask the network card to mix mode? S11XQ
Published in: 2003-11-25 05:02 Reply Posting: 110 Points: 0 Registration: 2003-09-26 It is really unable to answer! Didn't encounter such a situation! I only encounter the opposite of you!
---www.315safe.com
Antspower
Published in: 2003-11-25 09:19 Reply Posting: 5 Points: 0 Registration: 2003-11-19 Can you communicate? QQ34138008 Yiedu
Published in: 2003-11-25 11:52 Reply Posting: 446 Points: 0 Registration: 2003-03-25 Do you use PCAP or Socket to capture? If PCAP should be able to catch up with the code, if it is Raw Socket to see what you want to capture is issued. For example, ping ICMP package from this machine uses Raw Socket, but I can't catch but IE's data can be caught. I am also depressed.
--- Nostalgic lights, deciduous, and an old guitar sound. I have loved the girl who didn't have the courage to show you, are you ok?
Glacier
Published in: 2003-11-26 17:07 Reply Posting: 1463 Points: 31 Registration: 2001-03-04Winpcap This is certainly no problem in the LAN. Raw Socket does only capture the entry datagram for dial-up connections, but there is no problem for Ethernet cards.
--- floating, suffering from the boat, lying into the blushing
Aisong
Published in: 2003-11-27 09:32 Reply Posting: 1 Points: 0 Registration: 2003-11-27Row Socket No Ping Native Packages, you can't receive the TCP packet of this unit. Njiceshihong8
Published in: 2003-11-27 15:03 Reply Posting: 38 Points: 0 Registration: 2003-09-27Glacier, I use xsniffer on shared networks that cannot receive the IP package sent by this unit! Why do you know the reason? LQA21
Published in: 2003-11-28 04:38 Reply Posting: 160 Points: 0 Registration: 2001-10-18 ................. I suspect that your machine problem reloads the system. No you can't catch your own bag.
--- My heart is too chaotic
Rocklzy
Published in: 2003-11-30 00:26 Reply Posting: 4 Points: 0 Registration: 2003-11-291, Raw Socket does not receive the ping package because the recall request is completed by the system kernel, the packet is not Pass it to the original set of excuses. (In fact, most of the ICMP messages are to be transmitted to RAW socket, in addition to the number of referral requests, timestamp - requests such as requests) 2, all TCP and UDP packets received by the system will not pass any original set of excuses . (A role in actually original excuse is to handle the system that does not know, the system generally only knows several ICMP 2 IGMP 6 TCP 17 UDP, so the data of these protocols generally do not pass to the original socket) zhao88liang
Published in: 2003-12-01 21:12 Reply Posting: 57 Points: 0 Registration: 2003-05-13Socket_RAW can receive all packets unless there is a firewall to stop
--- 俺 is the countryside from home villages, don't flat me.
Shadowstar
Published in: 2003-12-01 21:32 Reply Posting: 10 Points: 0 Registration: 2003-04-30 I want to set up with Sniffer, whether you use WinPCAP, Libpcap, RawSocket can receive the local data package !
--- What is courage? It is brave to try, not afraid of failure! What is perseverance? After the failure, come from the beginning!
Kilor
Published in: 2003-12-02 10:31 Reply Posting: 7 Points: 0 Registration: 2002-08-20 Sniffer's technology is currently very mature, especially in sharing network environments, it is certainly no problem 1, SOCK_RAW can only receive IP packet, should be all packets, no problem 2, winpcap can collect all Ethernet packets, no problem, what is your situation, I have a speculation: Is it caused by a network environment? The speed of the speed, the network card work is abnormal, and one reason is that the program you have written has a problem. It is recommended that you look at your program, or put the program.
