Home page logo

pen-test logo Penetration Testing mailing list archives

Re: Promiscuous Mode
From: bariswinston () yahoo com
Date: 20 Mar 2008 13:08:12 -0000

Promiscuos mode is generally used for packet sniffing, network monitoring.
In this case if you enable Promiscuos, your network interface card will capture every packets in same collision 
domain(hub network,LAN).

Let me try to clarify

Consider a network packet, every network packet contain a MAC address. 
when network card recieves a packet first of all it checks destination MAC address value. If Destination MAC address 
does not match your network card's MAC address, packet will be dropped by your network card
In Promiscuous Mode your network card will accept every packets regardless of its destination MAC address over your LAN 
or collision domain. 
If your network is a hub network, you can capture every packets transmitted over network by using Promiscuous Mode, 
because hub is a layer 1 device and has not any knowledge about MAC addreses. 
If your network is a switch network, this will be hard work for you :) because switch is a layer 2 device and switch 
forwards packets according to its destination MAC addreses

you can also use Promiscuous Mode for malicious purposes       

This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]