Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Promiscuous in Windows with wireshark but not other apps

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Wed, 11 Oct 2006 15:10:57 -0700

On Oct 11, 2006, at 2:41 PM, Rudy Moore wrote:

I've got an Orinoco Gold card that seems to be in promiscuous mode while using wireshark, but not while using other applications that are using WinPCap. Those applications are set in promiscuous mode too.. but don't seem to actually be doing it.

What other applications have you tried? In particular, have you tried WinDump?


Any ideas on how I can debug this problem?

If WinDump doesn't have this problem, the first thing I'd do would be to get the source for those applications and make sure they're calling pcap_open_live() or pcap_open() correctly so that promiscuous mode really gets set. If I couldn't get the source, the first thing I'd do would be to ask the developers how they're calling those routines.