how to find out promiscuous mode

Bruno Wolff III bruno at wolff.to
Thu Feb 4 07:38:50 UTC 2010


On Thu, Feb 04, 2010 at 09:06:27 +0200,
  Gilboa Davara <gilboad at gmail.com> wrote:
> 
> Having said all that, if your network is switched (as opposed to using
> cheap FE hubs), only broadcast traffic (ARP/DHCP/etc) will be visible in
> promisc mode.

Mostly. There are other circumstances where a packet can be sent to all of
the ports even without machines/people trying to game things.

General advice is to treat switches as a way of improving network related
performance (relative to hubs), not as security devices.


More information about the users mailing list