Penetration Testing mailing list archives
Re: Promiscuous Mode
From: Robin Sheat <robin () kallisti net nz>
Date: Mon, 24 Mar 2008 19:43:58 +1300
On Tue, 25 Mar 2008, Muhammad Farooq-i-Azam wrote:
In short, if the NIC is not in promiscuous mode, it will discard a packet with an IP matching its own if the destination MAC in the packet is not its own.
You've answered the inverse of my question :) to clarify my rather bulky paragraph in the previous mail, if: * the NIC is in promiscuous mode, and * you receive a packet /p/, and * the MAC address in /p/ is _not_ yours, and * the IP address in /p/ _is_ yours, what do network stacks (not NICs) typically do? Do they respond to the packet in any way, or do they understand that because the MAC is different it should be ignored? I expect that is what they should do, but I'm curious if it is actually the case. -- Robin <robin () kallisti net nz> JabberID: <eythian () jabber kallisti net nz> Hostes alienigeni me abduxerunt. Qui annus est? PGP Key 0xA99CEB6D = 5957 6D23 8B16 EFAB FEF8 7175 14D3 6485 A99C EB6D ------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------
Current thread:
- Promiscuous Mode Simon Templar (Mar 19)
- Re: Promiscuous Mode don bailey (Mar 20)
- Re: Promiscuous Mode Amar Kulo (Mar 20)
- Re: Promiscuous Mode Morgan Reed (Mar 20)
- Re: Promiscuous Mode Robin Sheat (Mar 23)
- Re: Promiscuous Mode Muhammad Farooq-i-Azam (Mar 25)
- Re: Promiscuous Mode Robin Sheat (Mar 25)
- Re: Promiscuous Mode Muhammad Farooq-i-Azam (Mar 25)
- Re: Promiscuous Mode Robin Sheat (Mar 23)
- RE: Promiscuous Mode Richard C Lewis (Mar 20)
- <Possible follow-ups>
- Re: Promiscuous Mode bariswinston (Mar 20)