Penetration Testing mailing list archives

RE : Promiscuous Mode


From: <benoni.martin () accenture com>
Date: Wed, 19 Mar 2008 20:52:30 +0100

Hello Simon,
 
Quite simple:
- no promisc: your NIC looks at the network, and takes only the packets destinated to it (gets the packets where 
"destination MAC address" = "NIC MAC address"),
- promisc: your NIC looks at the network, and takes ALL the packets it can get, whether they are adressed to it or not.
 
So, in a nutshell:
- no promisc: your NIC shows you only your trafic
- promisc: your NIC shows you all the trafic on the wire
 
HTH ...

________________________________

De: listbounce () securityfocus com de la part de Simon Templar
Date: mer. 19/03/2008 14:51
À: pen-test () securityfocus com
Objet : Promiscuous Mode



Hello everybody,

I have a question concerning "Promiscuous Mode", I know what it is,
but I would like to know exactly what is happening behind the scenes
when I change my NIC to this mode

For example: what is the technicality in writing the command:
 ifconfig eth0 promisc?

Your help is so much appreciated.
Best regards.

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------






This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private 
information.  If you have received it in error, please notify the sender immediately and delete the original.  Any 
other use of the email by you is prohibited.

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------


Current thread: