Re: Promiscuous Mode

From: bariswinston@yahoo.com
Date: Thu Mar 20 2008 - 08:08:12 EST

('binary' encoding is not supported, stored as-is) Promiscuos mode is generally used for packet sniffing, network monitoring.
In this case if you enable Promiscuos, your network interface card will capture every packets in same collision domain(hub network,LAN).

Let me try to clarify

Consider a network packet, every network packet contain a MAC address.
when network card recieves a packet first of all it checks destination MAC address value. If Destination MAC address does not match your network card's MAC address, packet will be dropped by your network card
In Promiscuous Mode your network card will accept every packets regardless of its destination MAC address over your LAN or collision domain.
If your network is a hub network, you can capture every packets transmitted over network by using Promiscuous Mode, because hub is a layer 1 device and has not any knowledge about MAC addreses.
If your network is a switch network, this will be hard work for you :) because switch is a layer 2 device and switch forwards packets according to its destination MAC addreses

you can also use Promiscuous Mode for malicious purposes

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------

This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:58:28 EDT