Running a Dell Dimension 3000, with built-in LAN adapter.

When running Suse Linux 9.2 on the machine, I tell Ethereal to operate
promiscuously, and I can see all the traffic on the LAN segment.

When I run Ethereal under Win XP Pro (with all the updates), again with
promiscuous enabled, all I can see is broadcast traffic and any traffic
to/from the Dell.

So it's obvious that the network adapter is not actually running
promiscuously under Win XP, even though I enabled it in Ethereal.

Any ideas on how I can persuade Win XP to switch the NIC into
promiscuous mode?

--
Ian

In article <VfRq1QJ$lTtDFwNW@care4free.net>, news <news@care4free.net>
wrote:
>Running a Dell Dimension 3000, with built-in LAN adapter.
>
>When running Suse Linux 9.2 on the machine, I tell Ethereal to operate
>promiscuously, and I can see all the traffic on the LAN segment.
>
>When I run Ethereal under Win XP Pro (with all the updates), again with
>promiscuous enabled, all I can see is broadcast traffic and any traffic
>to/from the Dell.
>
>So it's obvious that the network adapter is not actually running
>promiscuously under Win XP, even though I enabled it in Ethereal.
>
>Any ideas on how I can persuade Win XP to switch the NIC into
>promiscuous mode?

Please see this Microsoft Knowledge Base article:

Bridge May Not Work With a Non-Promiscuous Mode Network Adapter
http://support.microsoft.com/Default.aspx?id=302348

To search the Knowledge Base, go to this web page:

http://support.microsoft.com/default...;EN-US;KBHOWTO
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com

Take it out to dinner and get it drunk. Oops, sorry, that was for women,
not Network Interface Cards. My bad.

"news" <news@care4free.net> wrote in message
news:VfRq1QJ$lTtDFwNW@care4free.net...
> Running a Dell Dimension 3000, with built-in LAN adapter.
>
> When running Suse Linux 9.2 on the machine, I tell Ethereal to operate
> promiscuously, and I can see all the traffic on the LAN segment.
>
> When I run Ethereal under Win XP Pro (with all the updates), again with
> promiscuous enabled, all I can see is broadcast traffic and any traffic
> to/from the Dell.
>
> So it's obvious that the network adapter is not actually running
> promiscuously under Win XP, even though I enabled it in Ethereal.
>
> Any ideas on how I can persuade Win XP to switch the NIC into promiscuous
> mode?
>
> --
> Ian

Kevin

Ian does have a care4free regard for use of language <g>!

--

Regards.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


"Kevin" <webman6@hotmail.com> wrote in message
news:%23yDhegXDGHA.336@TK2MSFTNGP14.phx.gbl...
> Take it out to dinner and get it drunk. Oops, sorry, that was for women,
> not Network Interface Cards. My bad.
>
> "news" <news@care4free.net> wrote in message
> news:VfRq1QJ$lTtDFwNW@care4free.net...
>> Running a Dell Dimension 3000, with built-in LAN adapter.
>>
>> When running Suse Linux 9.2 on the machine, I tell Ethereal to operate
>> promiscuously, and I can see all the traffic on the LAN segment.
>>
>> When I run Ethereal under Win XP Pro (with all the updates), again with
>> promiscuous enabled, all I can see is broadcast traffic and any traffic
>> to/from the Dell.
>>
>> So it's obvious that the network adapter is not actually running
>> promiscuously under Win XP, even though I enabled it in Ethereal.
>>
>> Any ideas on how I can persuade Win XP to switch the NIC into promiscuous
>> mode?
>>
>> --
>> Ian
>
>

The key to promiscuity is the total lack of "all the updates" as Big
Brother decided that several "feature" having to do with networking
were only used by black hats and were not of use to legitimate users
so these features were locked down with SP2. Can it be done, sure, but
you are not going to do it with regedit if that is what you are
looking for.
A lot of my site survey tools had to be re-tooled because of these
fixes.

<<<<<<SNIP>>>>> When I run Ethereal under Win XP Pro (with all the
updates), again <<<<SNIP>>>>
| > --
| > Ian
|
|

In message <#EZxHQcDGHA.4052@TK2MSFTNGP10.phx.gbl>, Mungo Bulge
<NO.SPAM@hotmail.com> writes
>The key to promiscuity is the total lack of "all the updates" as Big
>Brother decided that several "feature" having to do with networking
>were only used by black hats and were not of use to legitimate users
>so these features were locked down with SP2. Can it be done, sure, but
>you are not going to do it with regedit if that is what you are
>looking for.
>A lot of my site survey tools had to be re-tooled because of these
>fixes.
>
>

Hmmm, as I suspected. Thanks Mungo. I guess I'll have to stick to Linux.

--
Ian