Re: Promiscuous Mode



Wikipedia says:

In computing, promiscuous mode is a configuration of a network card
that makes the card pass all traffic it receives to the central
processing unit rather than just packets addressed to it — a feature
normally used for packet sniffing.

Each packet includes the hardware (Media Access Control) address. When
a network card receives a packet, it checks if the address is its own.
If not, the card normally drops the packet. But in promiscuous mode,
the card doesn't drop the packet, thus allowing the computer to read
all packets.

Last 2 senteces are easiest description of promiscuous mode on network card..

http://en.wikipedia.org/wiki/Promiscuous_mode

Regards
Amar


On Wed, Mar 19, 2008 at 2:51 PM, Simon Templar
<73696d6f6e74656d706c617200@xxxxxxxxxxxxxx> wrote:
Hello everybody,

I have a question concerning "Promiscuous Mode", I know what it is,
but I would like to know exactly what is happening behind the scenes
when I change my NIC to this mode

For example: what is the technicality in writing the command:
ifconfig eth0 promisc?

Your help is so much appreciated.
Best regards.

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------


------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------



Relevant Pages

  • Re: two Ethernet cards
    ... I want to capture all the packets in promiscuous mode ... I want to write a program that reads a packet from one, delays 250ms, ... After creating a socket you can specify which card to use in the ...
    (microsoft.public.vc.language)
  • RE: Network Card Promiscuous Mode
    ... Second to make windows run the card in promiscuous mode use winpcap. ... to facilitate one-on-one interaction with one of our expert instructors. ... Attend a course taught by an expert instructor with years of in-the-field ...
    (Security-Basics)
  • Re: Udp sending performance in Gbit Ethernet
    ... > saw a sudden drop of perfromance for certain packet sizes. ... > there can be just so many reasons like interrupts and DMA. ... > such as the maximum DMA block size or alike, which forces the driver to ... Try different versions of the driver for the card. ...
    (microsoft.public.development.device.drivers)
  • ethX interface rx errors
    ... Spontaneous system crash with heavy generic load or high packet traffic. ... SIOCGMIIPHY on 'eth1' failed: Operation not supported ... Basic mode control register 0x3000: ... device eth0 entered promiscuous mode ...
    (Linux-Kernel)
  • Re: Udp sending performance in Gbit Ethernet
    ... >> saw a sudden drop of perfromance for certain packet sizes. ... >> such as the maximum DMA block size or alike, which forces the driver to ... >> split frames into several DMA transfers. ... Try different versions of the driver for the card. ...
    (microsoft.public.development.device.drivers)