문제

is it possible to mirror (not redirect/forward) packets on one ethernet interface to another? The host machine will process the packets anyway, and since winpcap won't interpose as a filter, we wont be able to drop packets, I know. But I was wondering whether packet mirroring is possible using Winpcap or pcap.net?

Somewat similar to interface bridge. Using a custom NDIS 5/6 filter driver is an option, but not pursuing now. I'm trying to do this in strictly usermode, and would be happy if I could use C#.

Using Win7x64.

도움이 되었습니까?

해결책

Found the answer. You can achieve the same using the WinPcap. There is a project out there, daemonlogger which uses the libpcap, port it to windows. To use C#, trying Pcap.net

라이센스 : CC-BY-SA ~와 함께 속성
제휴하지 않습니다 StackOverflow
scroll top