|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
bariswinston
yahoo.com
Date: Thu Mar 20 2008 - 08:08:12 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Promiscuos mode is generally used for packet sniffing, network monitoring.
In this case if you enable Promiscuos, your network interface card will capture every packets in same collision domain(hub network,LAN).
Let me try to clarify
Consider a network packet, every network packet contain a MAC address.
when network card recieves a packet first of all it checks destination MAC address value. If Destination MAC address does not match your network card's MAC address, packet will be dropped by your network card
In Promiscuous Mode your network card will accept every packets regardless of its destination MAC address over your LAN or collision domain.
If your network is a hub network, you can capture every packets transmitted over network by using Promiscuous Mode, because hub is a layer 1 device and has not any knowledge about MAC addreses.
If your network is a switch network, this will be hard work for you :) because switch is a layer 2 device and switch forwards packets according to its destination MAC addreses
you can also use Promiscuous Mode for malicious purposes
------------------------------------------------------------------------
This list is sponsored by: Cenzic
Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!
http://www.cenzic.com/downloads
------------------------------------------------------------------------
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]