tcpdump mailing list archives

Re: [WinPcap-users] No ARP traffic


From: Guy Harris <guy () alum mit edu>
Date: Mon, 28 Apr 2003 01:26:35 -0700

On Sun, Apr 27, 2003 at 06:39:49PM +0200, Gisle Vanem wrote:
When pinging my router (10.0.0.1) from Win-XP, I cannot see the 
ARP request and response in tcpdump (running in another window
on the same machine). I'm sure the ARP cache is empty (I did an 
'arp -d 10.0.0.1') before running ping 10.0.0.1.

I tried it on Windows 2000, with both WinPcap 2.3 and 3.0, and it
worked, with the filter "ip or arp" in Ethereal and "(ip or arp) and not
port 6000" in WinDump 3.8 alpha (which is what

        http://windump.polito.it/install/default.htm

says is the release you get from that page).  (The "not port 6000" was
to filter out X11 noise.)

Maybe it's a W2K vs. WXP issue, or perhaps it's a driver issue.  (I have
an Intel PRO/100+.)
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe


Current thread: