Xref: utzoo comp.binaries.ibm.pc.d:11608 comp.dcom.lans:6918 comp.protocols.tcp-ip:14365 comp.sources.wanted:14796 comp.protocols.tcp-ip.ibmpc:4637
Path: utzoo!utgpu!watserv1!watmath!att!linac!pacific.mps.ohio-state.edu!zaphod.mps.ohio-state.edu!usc!snorkelwacker.mit.edu!bloom-beacon!eru!hagbard!sunic!lth.se!newsuser
From: e85rw@efd.lth.se (Ricard Wolf)
Newsgroups: comp.binaries.ibm.pc.d,comp.dcom.lans,comp.protocols.tcp-ip,comp.sources.wanted,comp.protocols.tcp-ip.ibmpc
Subject: Re: Monitoring Ethernet traffic with a simple Ethernet card
Message-ID: <1991Jan10.072630.22411@lth.se>
Date: 10 Jan 91 07:26:30 GMT
References: <1991Jan9.180145.2211@blister.Solbourne.COM>
Sender: newsuser@lth.se (LTH network news server)
Reply-To: e85rw@efd.lth.se (Ricard Wolf)
Organization: Lund Institute of Technology, Sweden
Lines: 29

In article <1991Jan9.180145.2211@blister.Solbourne.COM> patrick@blister.Solbourne.COM (Patrick Bowman) writes:
>I'm looking for an Ethernet line monitor program that runs on an IBM
>PC and works through a standard Ethernet card (3Com, WD, etc.).  I
>know that they exist  -  I've spoken to people who claim to have seen
>them in operation.  I don't know how they can work, because I thought
(2)
>all Ethernet cards had hardcoded E-net addresses.  (I have heard it
>rumored that some cards can have their E-net address downloaded to
>them, but I haven't seen examples of this).  Does anybody know
>where I can find such a thing?
(1)
>

1) FTP software have a package called LanWatch, witch monitors and
   disassembles network traffic.
2) True, there is usually a TTL PROM on the E-net card containing the node
   address, but:
   a) This usually has to be downloaded to the Ethernet controller chip
      by the network software.
   b) Most E-net controllers can be set in so-called promiscuous mode, in
      which theyreceive all packets from the net, regardless of their
      address.
-- 
Ricard Wolf

+--------------------------+-------------------------------------+
| Ricard Wolf              | Lund Institute of Technology        |
| email: e85rw@efd.lth.se  | If you can't buy 'em - build 'em !! |
+--------------------------+-------------------------------------+