[Winpcap-users] hubs vs. switches and promiscuous mode
jschultz at 1tech.net
Wed Oct 5 22:05:11 GMT 2005
If you put any nic in promiscuous mode, is there any switch (default
configuration) on which you would be able to see all the traffic for all the
ports or do you have to be connected to a hub? The more I read, the more I
see that you cannot sniff ports you are not connected to on a switch unless
you change the configuration of it, which is not done simply by putting a
nic into promiscuous mode. Is that correct? Also, is there some kind of
ARP request a nic can make that would result in it seeing all the traffic on
the switch? If so, does that result in a denial-of-service for any machines
on ports which are being "spoofed" by this phony ARP request?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Winpcap-users