Re: Wireless Sniffing in Windows 7 with Netmon 3.4



Axel Hammerschmidt <hlexa@xxxxxxxxxxx> wrote:

<snip>

The first thing one notices is that the second .cap file is much bigger
- almost 4x bigger - than the first, although both sessions connect to
www.datatid.dk and perform two login attempts and then close the
connection.

A reason for this could be that the Thinkpad - Windows XP - uses a HOSTS
file from www.mvps.org while the Mac Book Pro does not - it's running
Mac OS X. Therefor the TP doesn't have to download from as many
ad-servers as the MBP. Although this can't be confirmed by looking at
captured packets.

.