tcpdump mailing list archives
Re: [WinPcap-users] No ARP traffic
From: Guy Harris <guy () alum mit edu>
Date: Mon, 28 Apr 2003 01:26:35 -0700
On Sun, Apr 27, 2003 at 06:39:49PM +0200, Gisle Vanem wrote:
When pinging my router (10.0.0.1) from Win-XP, I cannot see the ARP request and response in tcpdump (running in another window on the same machine). I'm sure the ARP cache is empty (I did an 'arp -d 10.0.0.1') before running ping 10.0.0.1.
I tried it on Windows 2000, with both WinPcap 2.3 and 3.0, and it worked, with the filter "ip or arp" in Ethereal and "(ip or arp) and not port 6000" in WinDump 3.8 alpha (which is what http://windump.polito.it/install/default.htm says is the release you get from that page). (The "not port 6000" was to filter out X11 noise.) Maybe it's a W2K vs. WXP issue, or perhaps it's a driver issue. (I have an Intel PRO/100+.) - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe
Current thread:
- No ARP traffic Gisle Vanem (Apr 27)
- Re: No ARP traffic Guy Harris (Apr 28)
- Re: [WinPcap-users] No ARP traffic Guy Harris (Apr 28)
- Re: [WinPcap-users] No ARP traffic Gisle Vanem (Apr 28)