On 29 Sep 2003, Holden Hao wrote: .. > Would promiscuous mode matter on a switch? Except of course it may > indicate that a hacker tried to sniff packets hoping that you are on a > hub.
Yes. It's a trivial matter to poison the ARP cache on a switch and thus intercept packets intended for a certain machine and sniff that. If you then forward the packets to the original machine, then you will not be detected. :) Switch == false sense of security. It is still possible to sniff, except, a bit harder. --- Orlando Andico <[EMAIL PROTECTED]> Mosaic Communications, Inc. -- Philippine Linux Users' Group (PLUG) Mailing List [EMAIL PROTECTED] (#PLUG @ irc.free.net.ph) Official Website: http://plug.linux.org.ph Searchable Archives: http://marc.free.net.ph . To leave, go to http://lists.q-linux.com/mailman/listinfo/plug . Are you a Linux newbie? To join the newbie list, go to http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie
