Re: [PEN-TEST] Protocol Sniffer on PPP interface

[Ryan Permeh <ryan () EEYE COM>]

the windows port of libpcap does NOT support RAS ppp interfaces.  i ran into
this problem doing the port of nmap to nt.

there is very little documentation, and as far as i can see no code on how
to hook RAS adapters.  this means that dniff, ngrep, snort and the like will
not work with RAS adapters either.

Signed,
Ryan
eEye Digital Security Team
http://www.eEye.com

----- Original Message -----
From: "Vitaly McLain" <twistah () DATASURGE NET>
To: <PEN-TEST () SECURITYFOCUS COM>
Sent: Tuesday, October 10, 2000 4:06 PM
Subject: Re: Protocol Sniffer on PPP interface


> Hi,
>
> Libpcap in UNIX supports PPP, so I imagine the Windows port, winpcap, does
> as well. Libpcap based stuff, such as ngrep and dsniff, have been ported
to
> Win32 by Michael Davis (hi Mike). Check out his work at
> www.datanerds.net/~mike/. It will also have a link to download Winpcap.
>
> Sorry if this was already mentioned, I may have missed it.
>
> Vitaly McLain
> twistah () datasurge net