Sektor:Security
Morpheus:The Matrix

 


Mirrors:   Mirror1  

INFORMATION
Projects
   FTPXerox 1.0 
   Archaeopteryx 1.0  
   TCPKillNT 1.1
   TCPKillNT 1.0
   ShareMon 1.0
   TraceDet 1.0

Papers
   Introduction to Cryptography
   ATM Security/Insecurity

Research
   GrouteNT
   ScanlogdNT
   ArpwatchNT
   Useful Links

Miscellaneous
   News @ Sektor:Security
   >> Research News @ Sektor:Security
   Vulnerabilities/Exploits
   News @ Antionline.com
   Thinking about Security
   Sektor:Security Mailing List

Forums

 

WINPCAP V2.1 IS HORRIBLY BROKEN!
WinPcap Drivers (which are basically ports of libpcap for Windows NT) are excellent tools using which you can both read and write to the network on Windows NT. I've personally used Winpcap v 2.02 with great success. Not only could you capture packets, but (using libnetnt) you can also craft your own packets! What more can one ask for?

However, the latest release v 2.1 seems to be horribly broken! It is supposed to run on both Windows NT and Windows 2000. However, it does neither. I had a Windows NT 2000 Professional box running WinPcap v2.1 on a D-Link Adapter. All my captured packets were garbage! I also cross-checked with their own Analyzer app! It just could not decode packets! (I observed the same behavior on Windows NT also. BTW, both were fresh builds. So no DLL problems here)

Moral of the story: Before porting your apps to Winpcap v2.1, pls. test it thoroughly!

Click here to join the Sektor:Security mailing list.
Click here to see our disclaimer.
For corrections/additions/suggestions for this page, please send email to me.
Last modified: Sun, April 22 2001.