Re: MS Netmon and Packet.sys -- supporting multi plat forms

NTDEV
1

> 2. How does Microsoft open the NIC in promiscuous mode?

Don’t they do it using a driver?
What kind of driver? Can I do the same?

Set the promiscuous mode by OID_GEN_CURRENT_PACKET_FILTER.

Max

You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com

2

If you are trying to capture all packets, then packet.sys is horribly inefficient. When I did this in the past,
I was able to handle 5X the packet rate of packet.sys could do simply by passing in a 64K buffer on the read, and packing it
full of packets as they arrived.

-DH

----- Original Message -----
From: “Maxim S. Shatskih”
To: “NT Developers Interest List”
Sent: Wednesday, November 07, 2001 12:46 AM
Subject: [ntdev] Re: MS Netmon and Packet.sys – supporting multi plat forms

> > 2. How does Microsoft open the NIC in promiscuous mode?
> > Don’t they do it using a driver?
> > What kind of driver? Can I do the same?
>
> Set the promiscuous mode by OID_GEN_CURRENT_PACKET_FILTER.
>
> Max
>
>
>
> —
> You are currently subscribed to ntdev as: xxxxx@syssoftsol.com
> To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com

—
You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com