Snort mailing list archives

Re: capturing arp

From: Jacques <jbrierre () bellsouth net>
Date: Mon, 14 Apr 2003 08:56:54 -0500


On Monday, April 14, 2003, at 07:39  AM, Spencer, Arthur wrote:

In all of my tests you can't capture arp packets because they are
handled in hardware.  If you use Nemesis and generate an ARP packet it
isn't captured by Ethereal or Network General Sniffer.

That's strange... Ethereal regularly shows me ARP packets from/torouter and surrounding devices. Maybe I'm missing something?


-jacques.



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread:

capturing arp Patrick Amirian (Apr 11)
- Re: capturing arp Chris Green (Apr 14)
- <Possible follow-ups>
- Re: capturing arp Sergio Aldo Casas (Apr 13)
- RE: capturing arp Spencer, Arthur (Apr 14)
  - RE: capturing arp Rich Adamson (Apr 14)
  - Re: capturing arp Jacques (Apr 14)
  - Re: capturing arp Edin Dizdarevic (Apr 14)
- RE: capturing arp L. Christopher Luther (Apr 14)