Re: Promiscuous Mode

From: Robin Sheat (robin@kallisti.net.nz)
Date: Fri Mar 21 2008 - 23:04:57 EST


On Thursday 20 March 2008 14:27:38 Morgan Reed wrote:
> It won't make any difference on a switched network as you won't see
> packets not destined for your MAC address anyway (Unless they're
> broadcast packets)
...or you arp-flood the appropriate switch.

I have a related question: if your network card is in promisc mode and
assuming you can see the packets at all (because you're on a hub or
something), and someone sends a packet with a MAC address that isn't yours,
but that is addressed to your IP, what is the typical response of the network
stack? Ignore it because the MAC is wrong, or accept it because the IP
address is correct? Does this behaviour vary based on configuration or OS?

PS: Hi Morgan, fancy seeing you here :)

-- 
Robin <robin@kallisti.net.nz> JabberID: <eythian@jabber.kallisti.net.nz>
Hostes alienigeni me abduxerunt. Qui annus est?
PGP Key 0xA99CEB6D = 5957 6D23 8B16 EFAB FEF8  7175 14D3 6485 A99C EB6D




This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:58:29 EDT