Hello all, Does Promiscuous mode add any value in switch environment ? i could not find a clear answer for this, but based on switching mechnism, i think once the switch CAM table know about MAC addresses/ports, so the traffic will never reach a lan card, even its set in Promiscuous mode, unless i run another tool to fill the switch cam table and turn it to function more like hub, is it correct ? thanks.
Does Promiscuous mode add any value in switch environment ?
Only if the switch supports what some switch vendors call "mirror ports" or "SPAN ports", meaning that you can configure them to attempt to send a copy of all packets going through the switch to that port.
See the "Switched Ethernet" section of the "CaptureSetup/Ethernet" page of the Wireshark wiki.
Jasper Bongertz also wrote a very good blog article about SPAN ports titled, The Network Capture Playbook Part 4 – SPAN Port In-Depth that some might find interesting and useful.
Asked: 2020-11-25 17:08:54 +0000
Seen: 1,513 times
Last updated: Nov 25 '20
