Ethereal-dev: Re: [Ethereal-dev] Promiscuous-Mode Selection

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Mon, 18 Jun 2001 23:38:36 -0700
On Mon, Jun 18, 2001 at 01:43:00PM +0200, Gregor Glomm wrote:
> When in the 'capture preferences' only the promiscuous-mode is on,
> i can caputer all packets. 
> In addition the point 'update list of packets in real time' will be
> turned on. 
> Only the packets from/to my host will be seen.

I.e., if you select promiscuous mode but not "Update list of packets in
real time", you see all packets, but if you select promiscuous mode
*and* "Update list of packets in real time", you see only packets to or
from the machine on which you're running Ethereal?

Is this under some version of Windows (95/98/ME or NT/2000), or under
some UNIX-compatible operating system?  If it's under some
UNIX-compatible operating system, then, while Ethereal is capturing
packets with both promiscuous mode and "Update list of packets in real
time" selected, please run either

	ps axlww | egrep ethereal

or

	ps -ef | egrep ethereal

(depending on whether your particular UNIX-compatible OS has a
BSD-compatible or a System V-compatible "ps"); there should be two
Ethereal processes running, one of which should have the name
"ethereal-capture" (perhaps there will be more Ethereal processes
running if somebody else is also running Ethereal on that machine).