Solved

Fail to use Network Monitor.

Posted on 1998-12-28
7
178 Views
Last Modified: 2013-12-23
I always got failure while using Network Monitor V4.00.351. The error message is "The MAC driver does not support promiscious mode.". Please advise why?

Hardware: IBM Thinkpad model 380XD
          PCMCIA TokenRing NIC with the newest NIC driver  downloaded from IBM
Software: Win98/WinNT4.0+SP4 and "Microsoft Network Monitor Agent" installed in advance
          TCP/IP & NetBEUI enabled
Ways have tried:
          Enable/Disable the "Allow Full Duplex" of NIC  setting but helpless
0
Comment
Question by:zhangqj
7 Comments
 

Author Comment

by:zhangqj
ID: 1567896
Edited text of question
0
 
LVL 5

Expert Comment

by:aioudine
ID: 1567897
You can't use NM with regular NIC driver,
becose regular drivers is able to capture only
packets send directly to this mashine + broadcasts

You must find and use special kind of driver,
which able to work in promiscious mode
(in this mode driver able to capture all packets,
even they send to another mashine)

Unfortunately, not all NIC have promiscous mode driver ;-(

So, to bve in short: find promiscous mode driver,
or replace NIC to one which have required driver
0
 

Author Comment

by:zhangqj
ID: 1567898
I don't think aioudine's response has answered my question, the problem is still there. Anyway, Thanks!
0
What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

 
LVL 5

Expert Comment

by:heathprovost
ID: 1567899
I am afraid that zhangqi is absolutely right.  Almost ALL readily available drivers for Win95/NT are NOT capable of promiscous mode operation.  Most of the time an application that does packet sniffing and such comes with a driver/drivers for certain brands of NICs and that is just how it is.  I personally have seen promiscous mode drivers for some 3com/Intel NICs but only for ethernet and they dont work with Network monitor, They are hardcoded to work with a program called NetManage with does some of the same stuff.  Hope this helps
0
 
LVL 37

Accepted Solution

by:
Bing CISM / CISSP earned 200 total points
ID: 1567900
I think you maybe have checked M$KB Q135288,

Network Monitor Msg: Driver Does Not Support Promiscuous Mode
http://support.microsoft.com/support/kb/articles/q135/2/88.asp

which mentioned a similar symptom with NetFlex-2 network card. In fact, the problem is relative with packet collision detection, not full duplex mode. So, make sure your TokenRing card has properly configured for collision detection.

Moreover, the following KB Q140712 is also useful for your case, although it is for Madge's:

How to Enable Promiscuous Mode for Madge Token Ring Adapter:
http://support.microsoft.com/support/kb/articles/q140/7/12.asp
0
 

Author Comment

by:zhangqj
ID: 1567901
Thanks bbao!
I can now use NM in WinNT4.0 but its Filter should be set as point to point, if I set any to any, the problem is the same.
One more, NM cann't be used in Win98 yet, I know this beyond current discussion area, I actually have post the question in Win98 discussion area.
Thanks to all kind friends!
0
 
LVL 37

Expert Comment

by:Bing CISM / CISSP
ID: 1567902
You are welcome Chinese friend!
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

This article is in response to a question (http://www.experts-exchange.com/Networking/Network_Management/Network_Analysis/Q_28230497.html) here at Experts Exchange. The Original Poster (OP) requires a utility that will accept a list of IP addresses …
Trying to figure out group policy inheritance and which settings apply where can be a chore.  Here's a very simple summary I've written which might help.  Keep in mind, this is just a high-level conceptual overview where I try to avoid getting bogge…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now