Firewalls: Re: promiscuous mode on ethernet card-question.

Firewalls
(November 1994)

Indexed By Thread: [Previous] [Next]

Subject:	Re: promiscuous mode on ethernet card-question.
From:	Jeff Murphy <jcmurphy @ cadman . cit . buffalo . edu>
Date:	Wed, 16 Nov 1994 13:41:36 -0500 (EST)
To:	wbuttles @ gopher . champlain . edu
Cc:	firewalls @ greatcircle . com
In-reply-to:	<199411161123408099 . wbuttles @ gopher . champlain . edu> from "Wayne Buttles" at Nov 16, 94 11:23:35 am

>Can a PC running a sniffer that sets the ethernet card to
>promiscous mode be detected by same? Or other methods?


	no. promiscus mode means you are listening to everything
	(i.e. all packets are getting processed by the kernel/driver).
	this is a passive action, you can't tell that someone is listening,
	because the card will not give any indication that it is doing
	so.. sorry.

Follow-Ups:

Re: promiscuous mode on ethernet card-question.
From: Bruce Warrington <bruce @ ancc . com>

References:

promiscuous mode on ethernet card-question.
From: "Wayne Buttles" <wbuttles @ gopher . champlain . edu>

Indexed By Date	Previous:	Sidewinder Downtime From: Rich=Gautier%SP-23DC%DRC @ S1 . DRC . COM
Indexed By Date	Next:	Re: promiscuous mode on ethernet card-question. From: Ted Lemon <mellon @ ipd . wellsfargo . com>
Indexed By Thread	Previous:	promiscuous mode on ethernet card-question. From: "Wayne Buttles" <wbuttles @ gopher . champlain . edu>
Indexed By Thread	Next:	Re: promiscuous mode on ethernet card-question. From: Bruce Warrington <bruce @ ancc . com>