General discussion

Locked

P-mode

By blaauwtand ·
Can someone please provide me with technical info regarding Network Cards running in promiscuous mode?

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

P-mode

by Ann777 In reply to P-mode

In a network, promiscuous mode allows a network device to intercept and read each network packet that arrives in its entirety. This mode of operation is sometimes given to a network snoop server that captures and saves all packets for analysis (for example, for monitoring network usage).

In an Ethernet local area network (LAN), promiscuous mode is a mode of operation in which every data packet transmitted can be received and read by a network adapter. Promiscuous mode must be supported byeach network adapter as well as by the input/output driver in the host operating system. Promiscuous mode is often used to monitor network activity.

Promiscuous mode is the opposite of non-promiscuous mode. When a data packet is transmitted in non-promiscuous mode, all the LAN devices "hear" the data to determine if the network address included in the data packet is theirs. If it isn't, the data packet is passed onto the next LAN device until the device with the correct network address is reached. That device then receives and reads the data.

Collapse -

P-mode

by blaauwtand In reply to P-mode

The question was auto-closed by TechRepublic

Collapse -

P-mode

by guru@net In reply to P-mode

The last answer was pretty close but sounds like that the traffic is promiscuous. Actually the NIC and driver allow the NIC card to be promiscuous and copy all frames that are transmitted on the segment.

All NICs hear all frmaes on the segment, they read the destination MAC and if it their MAC or a broadcast address the NIC copy the frame to its buffer and passes it up to the network layer. If not then it ignores the frame and does not copy.

Promiscuous mode means that it copies ALL frames and passes them up to the network layer.

Collapse -

P-mode

by blaauwtand In reply to P-mode

The question was auto-closed by TechRepublic

Collapse -

P-mode

by blaauwtand In reply to P-mode

This question was auto closed due to inactivity

Back to Security Forum
5 total posts (Page 1 of 1)  

Related Forums