[Dshield] WinPCap

allwayson@yahoo.com allwayson at yahoo.com
Fri Sep 5 15:05:29 GMT 2003


shawn,

yes. winpcap will tax your boxes. how much depends on
the amount of traffic it sees and the type of nic you
are using in your servers.

btw: to limit users from executing it, you can remove
execute rights from that file/directory.

just my $0.02,

p.

--- Shawn Berg <shawn at saeweb.com> wrote:
> Nope that is not an issue. Thank you though for both
> of your responses.
> 
> Shawn
> 
> -----Original Message-----
> From: list-bounces at dshield.org
> [mailto:list-bounces at dshield.org]On
> Behalf Of Guillaume Lederrey
> Sent: Thursday, September 04, 2003 5:35 PM
> To: General DShield Discussion List
> Subject: RE: [Dshield] WinPCap
> 
> 
> > > Anyone know if simply installing the WinPCap
> driver (to use 
> > > programs such as ethereal to capture packets)
> will tax the 
> > > NIC at all when it is not being used? Wanted to
> check out 
> > > some traffic on a few servers but dont want to
> install those 
> > > drivers if they will cause the computer/nic to
> process 
> > > anything any slower.
> 
>   I dont know any bandwidth issue, but I know there
> was a bug (dont know
> if it is closed) that allowed any user to sniff
> packets once the driver
> was loaded by "Administrator".  That might or might
> not be an issue for
> you ...
> 
> 	Guillaume
> 
> ---
> Incoming mail is certified Virus Free.
> Checked by AVG anti-virus system
> (http://www.grisoft.com).
> Version: 6.0.514 / Virus Database: 312 - Release
> Date: 8/28/2003
> 
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system
> (http://www.grisoft.com).
> Version: 6.0.515 / Virus Database: 313 - Release
> Date: 9/1/2003
> 
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or
> unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list


__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com




More information about the list mailing list