from the quill of lists @
lina .
inka .
de (Bernd Eckenfels) on scroll
<m0uqYAU-0004k3C @
lina>
> On a switched ethernet a NIC in promisc mode will only receive the
> packets
> which are broadcasted (i.e. ARP) and those which are send directly to the
> HW-Address of the interface. Thats the reason why u have less collisions
> with switches, cause they simply filter the Packets on the net for each
> port. You can also lock the arp-addresses in the switch for more
> security.
Don't people usually switch segments rather than individual hosts?? Isn't
switching ethernet a little expensive to do it by host?? If the switching
is done by segment rather than by host, then one could still sniff one's
own physical segment.
b.
--
Brian J. Murrell Brian_Murrell @
bctel .
net
BCTel Advanced Communications brian @
ilinx .
com
Vancouver, B.C. brian @
wimsey .
com
604 454 5279
Follow-Ups:
References:
|
|
