RE: capturing arp

[Rich Adamson <radamson () routers com>]

That's not true; been using NAI Sniffer, Ethereal, etc, to view arp
requests and responses for years. There could be some specific nic
and OS that does not allow capturing, but haven't seen one in 20+
years of doing detailed protocol analysis. The TCP/IP protocol stack 
(including the ARP functions) have always been implemented in software
(not hardware).

> In all of my tests you can't capture arp packets because they are
> handled in hardware.  If you use Nemesis and generate an ARP packet it
> isn't captured by Ethereal or Network General Sniffer.




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users