Solved

Fail to use Network Monitor.

Posted on 1998-12-28
7
184 Views
Last Modified: 2013-12-23
I always got failure while using Network Monitor V4.00.351. The error message is "The MAC driver does not support promiscious mode.". Please advise why?

Hardware: IBM Thinkpad model 380XD
          PCMCIA TokenRing NIC with the newest NIC driver  downloaded from IBM
Software: Win98/WinNT4.0+SP4 and "Microsoft Network Monitor Agent" installed in advance
          TCP/IP & NetBEUI enabled
Ways have tried:
          Enable/Disable the "Allow Full Duplex" of NIC  setting but helpless
0
Comment
Question by:zhangqj
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
7 Comments
 

Author Comment

by:zhangqj
ID: 1567896
Edited text of question
0
 
LVL 5

Expert Comment

by:aioudine
ID: 1567897
You can't use NM with regular NIC driver,
becose regular drivers is able to capture only
packets send directly to this mashine + broadcasts

You must find and use special kind of driver,
which able to work in promiscious mode
(in this mode driver able to capture all packets,
even they send to another mashine)

Unfortunately, not all NIC have promiscous mode driver ;-(

So, to bve in short: find promiscous mode driver,
or replace NIC to one which have required driver
0
 

Author Comment

by:zhangqj
ID: 1567898
I don't think aioudine's response has answered my question, the problem is still there. Anyway, Thanks!
0
Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

 
LVL 5

Expert Comment

by:heathprovost
ID: 1567899
I am afraid that zhangqi is absolutely right.  Almost ALL readily available drivers for Win95/NT are NOT capable of promiscous mode operation.  Most of the time an application that does packet sniffing and such comes with a driver/drivers for certain brands of NICs and that is just how it is.  I personally have seen promiscous mode drivers for some 3com/Intel NICs but only for ethernet and they dont work with Network monitor, They are hardcoded to work with a program called NetManage with does some of the same stuff.  Hope this helps
0
 
LVL 37

Accepted Solution

by:
bbao earned 200 total points
ID: 1567900
I think you maybe have checked M$KB Q135288,

Network Monitor Msg: Driver Does Not Support Promiscuous Mode
http://support.microsoft.com/support/kb/articles/q135/2/88.asp

which mentioned a similar symptom with NetFlex-2 network card. In fact, the problem is relative with packet collision detection, not full duplex mode. So, make sure your TokenRing card has properly configured for collision detection.

Moreover, the following KB Q140712 is also useful for your case, although it is for Madge's:

How to Enable Promiscuous Mode for Madge Token Ring Adapter:
http://support.microsoft.com/support/kb/articles/q140/7/12.asp
0
 

Author Comment

by:zhangqj
ID: 1567901
Thanks bbao!
I can now use NM in WinNT4.0 but its Filter should be set as point to point, if I set any to any, the problem is the same.
One more, NM cann't be used in Win98 yet, I know this beyond current discussion area, I actually have post the question in Win98 discussion area.
Thanks to all kind friends!
0
 
LVL 37

Expert Comment

by:bbao
ID: 1567902
You are welcome Chinese friend!
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

FIPS stands for the Federal Information Processing Standardisation and FIPS 140-2 is a collection of standards that are generically associated with hardware and software cryptography. In most cases, people can refer to this as the method of encrypti…
Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question