Discussion Locked

NIC Running in Promiscuous Mode?

0 helpful
3 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

How can you check and see whether or not the NIC on your Windows NT 4.0 Server is running in promiscuous mode?

We are experiencing an unusual amount of unverifiable ftp traffic on a particular server and I think this may have something to do withit. I'm not sure if there is a technical explanation for it or not, but please point me in the right direction.

3 replies

by mckaytech

It may depend somewhat on what brand of NIC you are using. For example, the Intel NIC driver creates a registry key called PromiscuousMode with a value of 0 if it's off or 1 if it's on. If you're using that card, you can just search the registry for that key and see how it is configured.

The other possibility would be to run Network Monitor on the server and see if you pick up all packets on the wire or just those destined for the server itself.

There are a couple of utilities in the Linux world that read the card configuration and report things like the status of promiscuous mode but I'm not aware of a Windows utility that does it.

paul

This discussion is closed to new replies.