First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

Promiscuous mode and switch

Hello all, Does Promiscuous mode add any value in switch environment ? i could not find a clear answer for this, but based on switching mechnism, i think once the switch CAM table know about MAC addresses/ports, so the traffic will never reach a lan card, even its set in Promiscuous mode, unless i run another tool to fill the switch cam table and turn it to function more like hub, is it correct ? thanks.

XP_2600's avatar
1
XP_2600
asked 2020-11-25 17:08:54 +0000, updated 2020-11-25 17:09:48 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

1

Does Promiscuous mode add any value in switch environment ?

Only if the switch supports what some switch vendors call "mirror ports" or "SPAN ports", meaning that you can configure them to attempt to send a copy of all packets going through the switch to that port.

See the "Switched Ethernet" section of the "CaptureSetup/Ethernet" page of the Wireshark wiki.

Guy Harris's avatar
19.9k
Guy Harris
answered 2020-11-25 17:46:52 +0000
edit flag offensive 0 remove flag delete link
more

Comments

Jasper Bongertz also wrote a very good blog article about SPAN ports titled, The Network Capture Playbook Part 4 – SPAN Port In-Depth that some might find interesting and useful.

cmaynard's avatar cmaynard (2020-11-25 18:20:51 +0000) edit
more
  • delete

Thank you!

XP_2600's avatar XP_2600 (2020-11-25 23:32:08 +0000) edit
more
  • delete
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer