Penetration Testing mailing list archives

Re: Promiscuous Mode


From: Robin Sheat <robin () kallisti net nz>
Date: Mon, 24 Mar 2008 19:43:58 +1300

On Tue, 25 Mar 2008, Muhammad Farooq-i-Azam wrote:
In short, if the NIC is not in promiscuous mode, it will discard a
packet with an IP matching its own if the destination MAC in the packet
is not its own.
You've answered the inverse of my question :) to clarify my rather bulky 
paragraph in the previous mail,
if:
 * the NIC is in promiscuous mode, and
 * you receive a packet /p/, and
 * the MAC address in /p/ is _not_ yours, and
 * the IP address in /p/ _is_ yours,
what do network stacks (not NICs) typically do? Do they respond to the packet 
in any way, or do they understand that because the MAC is different it should 
be ignored? I expect that is what they should do, but I'm curious if it is 
actually the case.

-- 
Robin <robin () kallisti net nz> JabberID: <eythian () jabber kallisti net nz>

Hostes alienigeni me abduxerunt. Qui annus est?

PGP Key 0xA99CEB6D = 5957 6D23 8B16 EFAB FEF8  7175 14D3 6485 A99C EB6D

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------


Current thread: