Re: Promiscuous mode for ethernet device

2002-12-10 Thread Jeff
Kevin Coyner, 2002-Dec-10 17:31 -0500: > > On Tue, Dec 10, 2002 at 01:47:41PM -0500, sean finney wrote.. > > > heya, > > > > iirc promiscuous mode means to listen to all traffic on the network > > as opposed to only traffic addressed to the mac address of your ethernet > > card. this is re

Re: Promiscuous mode for ethernet device

2002-12-10 Thread sean finney
On Tue, Dec 10, 2002 at 05:31:32PM -0500, Kevin Coyner wrote: > One question that I've been meaning to ask and this seems to be close to > being on-topic: If you're running a sniffer in promiscuous mode on a > network that is linked together via a switch (as opposed to a hub), will > you still be

Re: Promiscuous mode for ethernet device

2002-12-10 Thread Frank Gevaerts
On Tue, Dec 10, 2002 at 05:31:32PM -0500, Kevin Coyner wrote: > > On Tue, Dec 10, 2002 at 01:47:41PM -0500, sean finney wrote.. > > > heya, > > > > iirc promiscuous mode means to listen to all traffic on the network > > as opposed to only traffic addressed to the mac address of your ethernet

Re: Promiscuous mode for ethernet device

2002-12-10 Thread nate
Kevin Coyner said: > One question that I've been meaning to ask and this seems to be close to > being on-topic: If you're running a sniffer in promiscuous mode on a > network that is linked together via a switch (as opposed to a hub), will > you still be able to passively capture all packets from

Re: Promiscuous mode for ethernet device

2002-12-10 Thread Kevin Coyner
On Tue, Dec 10, 2002 at 01:47:41PM -0500, sean finney wrote.. > heya, > > iirc promiscuous mode means to listen to all traffic on the network > as opposed to only traffic addressed to the mac address of your ethernet > card. this is real useful for passively sniffing packets on your > netw

Re: Promiscuous mode for ethernet device

2002-12-10 Thread sean finney
On Tue, Dec 10, 2002 at 09:27:11PM +0100, A. Loonstra wrote: > I have been using tcpdump but that was only to debug software which > wasn't working properly. Still I think it's weird that it did happen > upon shutdown. I've been checking the scripts which are called during > shutdown but couldn'

Re: Promiscuous mode for ethernet device

2002-12-10 Thread A. Loonstra
sean finney wrote: heya, as for why you were going in and out of that mode -- were you using any packet filtering/processing application like tcpdump or dsniff? iptables might do that as well, but i can't say off the top of my head for sure. sean I have been using tcpdump but that was only t

Re: Promiscuous mode for ethernet device

2002-12-10 Thread sean finney
heya, iirc promiscuous mode means to listen to all traffic on the network as opposed to only traffic addressed to the mac address of your ethernet card. this is real useful for passively sniffing packets on your network when you don't want to / can't run it on one of the machines in question.

Re: Promiscuous mode for ethernet device

2002-12-10 Thread nate
A. Loonstra said: > What the F^%&*( what does this mean??? It was quite useless to put the > machine into promiscuous mode since it was shutting down.. Or was the > DHCPD daemon doing something? you have any network monitoring software installed? e.g. arp tracker, network sniffer, snort, or some