[Winpcap-users] hubs vs. switches and promiscuous mode

[Julie Schultz]

If you put any nic in promiscuous mode, is there any switch (default
configuration) on which you would be able to see all the traffic for all the
ports or do you have to be connected to a hub?  The more I read, the more I
see that you cannot sniff ports you are not connected to on a switch unless
you change the configuration of it, which is not done simply by putting a
nic into promiscuous mode.  Is that correct?  Also, is there some kind of
ARP request a nic can make that would result in it seeing all the traffic on
the switch?  If so, does that result in a denial-of-service for any machines
on ports which are being "spoofed" by this phony ARP request?

 

Thanks,

Julie Schultz  

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20051005/5d289f2a/attachment.htm