Wireshark · Ethereal-users: Re: [Ethereal-users] Windows XP Promiscuous mode

[Guy Harris <guy@xxxxxxxxxx>]

On Thu, Feb 27, 2003 at 09:29:37PM -0000, Steve Haskew wrote:
> I've been having trouble with Windows XP Pro and Ethereal in promiscuous
> mode. I can't receive packets that aren't directed to my computer. Other
> places suggest that it's because I'm connected to a switch, but another
> computer (running Linux), connected to the same switch, using the same model
> of NIC, can capture everything fine. Is this a problem in Ethereal, WinPcap,
> or Windows XP?

Probably one of the latter two.  Either it's a WinPcap problem, a
problem with the Windows XP networking code, or a problem with the
driver for that particular NIC.

I'd suggest that you try it with WinDump, just to make sure (if WinDump
can't run it in promiscuous mode either - remember that "-p" turns *OFF*
promiscuous mode; promiscuous mode is turned *ON* by default - then it's
definitely a WinPcap or WXP or driver problem).

If WinDump can't do promiscuous mode either, ask the WinPcap developers
about this:

	http://winpcap.polito.it/contact.htm