Note that those drivers also support permanently disabling promiscuous mode promiscuous mode can never be re-enabled on an adapter on which promiscuous mode has been permanently disabled. The Windows driver for the Madge Presto PCI 2000 TokenRing adapter requires you to enable promiscuous mode explicitly in order to do this, and the drivers for other Madge TokenRing adapters allow promiscuous mode to be disabled, in which case promiscuous mode will have to be re-enabled see Madge's An Overview of Promiscuous Mode for more information on this. In order to capture TokenRing traffic other than Unicast traffic to and from the host on which you're running Wireshark, Multicast traffic, and Broadcast traffic, the adapter will have to be put into promiscuous mode, so that the filter mentioned above is switched off and all packets received are delivered to the host. The driver for the adapter will also send copies of transmitted packets to the packet capture mechanism, so that they will be seen by a capture program as well. packets sent to that host on that network Īll Multicast packets that are being sent to a Multicast address for that adapter, or all Multicast packets regardless of the address to which they're being sent (some network adapters can be configured to accept packets for specific Multicast addresses, others deliver all multicast packets to the host for it to filter) The TokenRing hardware on the network adapter filters all packets received, and delivers to the hostĪll Unicast packets that are being sent to one of the addresses for that adapter, i.e.
See the Supported Capture Media page for Wireshark capturing support on various platforms. Capture using a monitor mode of the switch.Capture on the machine you're interested in.
0 kommentar(er)
