Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Nvidia MCP onboard wired 10/100/1000 NIC will not do promi

From: "David H. Lipman" <DLipman@xxxxxxxxxxx>
Date: Tue, 17 Jan 2012 21:19:37 -0500
From: "Steve Gladden" <steve@xxxxxxxxxxxxxxxxxxxxx>

> That be the problem from my tests the device WILL NOT do promiscuous mode!
>
> I'm very used to this behavior from wireless NICS but this has me scratching my head.
> Is this feature disabled behavior built into the chipset or drivers?
> And might you be able to point me in the direction of enabling the feature for these
> devices? Of course checking the checkmark within wirehark has no affect nor does it
> generate an error.. It captures but only Broadcast packets and things addressed to the
> card itself.  (same as if it's not checked) Moving over to a PCIe or PCI Installed Intel
> or Broadcom card works fine as expected on this same setup. The NVIdia NIC is working
> normally and has excellent performance aside from my not being able to get ti to capture
> in promiscuous mode.
>
> Nic in question is:
> RealtekRTL8211CL tied into an NVIDIA GeForce 7025/nForce 630a motherboard chip.
> Motherboard is a Gigabyte GA-m68MT-S2P (AMD socket AM3 CPU).
>
> Running Win7 64bit very clean install and up to date.
>
> Wireshark & WINPCAP  info:
>
> Version 1.6.5 (SVN Rev 40429 from /trunk-1.6)
>
> Compiled (64-bit) with GTK+ 2.22.1, with GLib 2.26.1, with WinPcap (version
> unknown), with libz 1.2.5, without POSIX capabilities, without libpcre, without
> SMI, with c-ares 1.7.1, with Lua 5.1, without Python, with GnuTLS 2.10.3, with
> Gcrypt 1.4.6, without Kerberos, with GeoIP, with PortAudio V19-devel (built Jan
> 10 2012), with AirPcap.
>
> Running on 64-bit Windows 7 Service Pack 1, build 7601, with WinPcap version
> 4.1.2 (packet.dll version 4.1.0.2001), based on libpcap version 1.0 branch
> 1_0_rel0b (20091008), GnuTLS 2.10.3, Gcrypt 1.4.6, without AirPcap.
>
> Built using Microsoft Visual C++ 9.0 build 21022
>
> All run as administrator on a local administrator account.
>
> Thoughts? Flames?  Did I miss something OBVIOUS in the documentation about Nvidia or
> Realtek chipsets & drivers?
>
> I'm not finding it!  :)
>
>
> Steve Gladden
>

Then install a NIC that is known to work in promiscuous mode.  Some NICs just don't.



-- 
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp