Path: utzoo!mnetor!uunet!lll-winken!lll-lcc!ames!pasteur!ucbvax!ANDREW.CMU.EDU!aw0g+
From: aw0g+@ANDREW.CMU.EDU (Aaron Wohl)
Newsgroups: comp.protocols.appletalk
Subject: Re: How do I see all packets on the network
Message-ID: <oWFd5wy00WA1EJ0kVR@andrew.cmu.edu>
Date: 22 Mar 88 16:08:28 GMT
References: <1783@bgsuvax.UUCP>
Sender: uucp@ucbvax.BERKELEY.EDU
Organization: The Internet
Lines: 32

It isn't practical to put mpp into promiscious mode.  The problem is that the
the scc has packets matching
hardware address command and a read any packet.  In the MPP driver it is set in
a few places.
I have been working on the next version of seer (a network debugging tool) off
and on.  Seer has a real mac
device driver to do promiscious listening.   Packets are decoded by a
description language.  The new version 3.0
will have a built in compiler for the packet description language.   The
current version 2.0 uses some hairy
c macros to describe packets.

Anyway,  if you want to see how to do promiscious listening look at 2.0.  If
you want to do serious network
debugging, wait for 3.0.  Seer is all in the public domain.  Seer was written
by myself, Aaron Wohl.   Some
of the develeopment was funded by Carnegie -Mellon.  Some was funded by a
computer company the name of
which I can't use without geting this mail message approved.

Seer is packaged with Stuffit version 1.31.  All of the sources documentation
and executables are included.
Lightspeed C is development language.  Microsoft word is used for the
documentation.

I am trying to set up a info-appletalk archive, for the time being,
Connect to ghostwheel.andrew.cmu.edu (host number 128.2.35.1)
log in as anonymous
retrieve the file seer_v2.0.sit.Hqx
Un-binhex it with binhex 4.0
Un-sit it with Stuffit 1.31 or later

Aaron Wohl