15 Nov 2001 12:29:45

Tom starts to get impatient.

Subject: RE: FW: wired news story
   From: Tom Liston
   Date: Thu, 15 Nov 2001 12:29:45
     To: Gregor Freund, Michelle Delio

Mr. Freund,

Please accept my apologies for not replying to you earlier.  My 'day 
job' kept me away from my desk all yesterday afternoon, and I 
haven't had a chance to look at my email until this morning.

In looking at the 'OutBound' page on the HackBusters website, I'm 
assuming that the entries there from the IP address 216.15.41.163 
must be a result of your testing.  I would be interested in exactly 
what your results were.  If they are as 'mixed' as you say, perhaps 
I could provide some insight.

As for the NT/2000/XP driver, unfortunately I can't really help you 
with that.  I don't administer any of those OSs, and I don't have a 
copy of packet.sys.  In my earlier message, I mentioned only that I 
knew that one was available.  I'm sorry if I wasn't clear.  I would 
try the U of Torino site:

http://netgroup-serv.polito.it/winpcap/install/default.htm

I'm sure that they have it there, and I believe that is where 
Michelle got the copy that she uses.  Since you mentioned that you 
were familiar with the Torino packet capture libraries I hope that 
my delay in replying hasn't kept you from already being able to get 
a copy.

I would be interested to hear your assessment of exactly why the 
test code (OutBound) is able work.  Because you say that it doesn't 
appear to be a core architecture issue, I assume that you've come to 
some conclusions.  One of the main reasons that I believed it really 
was a core issue was the fact that the test code worked on such a 
wide variety of combinations of ZoneAlarm versions and 
architectures.  As I said, I would find your assessment, even if 
preliminary, to be interesting.

Regards,
-TL

Prev | TOC | Next