Pure Metal
24-01-2007, 12:51
i found this neat little thing on the ol' interweb: http://packetgarden.com/ and would love to install it. it looks cool.
however after installing i get problems in capturing my packet data. the help says to install a program called WinPcap (http://www.winpcap.org/)
now, i've done a little research and read the FAQs, etc, but i still can't figure out if this is really legitimate and safe. i don't know squat about networking tbh, and it still seems a little off-colour to me.
even if its not malicious itself, stuff like this from the pcap FAQ scares me a little:
Q-27: My antivirus / antispyware program reports WinPcap as a virus / trojan/ spyware! Are you hackers trying to infect my computer?
A: WinPcap is not a virus. WinPcap is an industry standard library used by many tools, several of which commercial, and developed by a respected team of people. However, since it's free and since it's an easy and powerful way to receive and transmit low-level network traffic, it seems that some virus writers used it too. As a result, at least once a month we have somebody complaining its antivirus program tells him that WinPcap is a virus. Your antivirus program should detect the virus itself, not the libraries used by it. It's like saying the MS Winsock is a virus because some trojans use sockets to send or receive data on the network.
So, please contact your antivirus company and tell them to fix the problem.
http://www.winpcap.org/misc/faq.htm#Q-26
sounds like it'd just be like opening a new door for other malicious software to get at my machine. if that's not the case then i'll just go for it, but if so is it worth it?
so anybody who knows stuff about computers, what do you think? help would be appreciated! :)
however after installing i get problems in capturing my packet data. the help says to install a program called WinPcap (http://www.winpcap.org/)
now, i've done a little research and read the FAQs, etc, but i still can't figure out if this is really legitimate and safe. i don't know squat about networking tbh, and it still seems a little off-colour to me.
even if its not malicious itself, stuff like this from the pcap FAQ scares me a little:
Q-27: My antivirus / antispyware program reports WinPcap as a virus / trojan/ spyware! Are you hackers trying to infect my computer?
A: WinPcap is not a virus. WinPcap is an industry standard library used by many tools, several of which commercial, and developed by a respected team of people. However, since it's free and since it's an easy and powerful way to receive and transmit low-level network traffic, it seems that some virus writers used it too. As a result, at least once a month we have somebody complaining its antivirus program tells him that WinPcap is a virus. Your antivirus program should detect the virus itself, not the libraries used by it. It's like saying the MS Winsock is a virus because some trojans use sockets to send or receive data on the network.
So, please contact your antivirus company and tell them to fix the problem.
http://www.winpcap.org/misc/faq.htm#Q-26
sounds like it'd just be like opening a new door for other malicious software to get at my machine. if that's not the case then i'll just go for it, but if so is it worth it?
so anybody who knows stuff about computers, what do you think? help would be appreciated! :)