copper@bgsuvax.UUCP (Chip Copper) (03/22/88)
Does anyone know how to patch the MPP driver so that I can see ALL packets on the network, and not just the ones with my node id or the broadcast address? I'm sure there's a simple test somewhere in the driver, but I'd rather not go through it if someone else has already found it. Thanks! -- Chip Copper CSNET copper@andy.bgsu.edu N8ECQ UUCP ...!osu-cis!bgsuvax!copper Department of Computer Science ARPA copper%andy.bgsu.edu@csnet-relay Bowling Green State University
aw0g+@ANDREW.CMU.EDU (Aaron Wohl) (03/23/88)
It isn't practical to put mpp into promiscious mode. The problem is that the the scc has packets matching hardware address command and a read any packet. In the MPP driver it is set in a few places. I have been working on the next version of seer (a network debugging tool) off and on. Seer has a real mac device driver to do promiscious listening. Packets are decoded by a description language. The new version 3.0 will have a built in compiler for the packet description language. The current version 2.0 uses some hairy c macros to describe packets. Anyway, if you want to see how to do promiscious listening look at 2.0. If you want to do serious network debugging, wait for 3.0. Seer is all in the public domain. Seer was written by myself, Aaron Wohl. Some of the develeopment was funded by Carnegie -Mellon. Some was funded by a computer company the name of which I can't use without geting this mail message approved. Seer is packaged with Stuffit version 1.31. All of the sources documentation and executables are included. Lightspeed C is development language. Microsoft word is used for the documentation. I am trying to set up a info-appletalk archive, for the time being, Connect to ghostwheel.andrew.cmu.edu (host number 128.2.35.1) log in as anonymous retrieve the file seer_v2.0.sit.Hqx Un-binhex it with binhex 4.0 Un-sit it with Stuffit 1.31 or later Aaron Wohl