Mark M. Hoffman on 13 Oct 2006 01:16:29 -0000


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] W2K3 question - mea culpa


Hi:

* Toby DiPasquale <toby@cbcg.net> [2006-10-12 15:19:33 -0400]:
> On Thu, Oct 12, 2006 at 06:33:13PM +0000, Carl Husa wrote:
> > 
> > Anybody got an idea how to ...
> > 
> > I have an Intel Pro 1000/XT adapter, running on a W2K3 box, which may
> > become a Fedora server, that runs Wireshark.  The adapter sees only traffic
> > directly to and from its own address.  I'm assuming the NIC isn't running
> > in promiscuous mode.
> > 
> > Is this configurable - and how?
> 
> Are you running Wireshark with admin privileges? If not, it won't be able
> to set the NIC to promiscuous mode. As well, if your NIC is on a VLAN that
> no other boxes share, you will also not see any other traffic.

It's not just VLANs.  Using a switch (as opposed to a hub) will cause the same
problem.  Some (managed) switches allow you to put individual ports into the
equivalent of promiscuous mode as well - all traffic on all ports is visible to
the promiscuous port - but if you're using an unmanaged switch you're pretty
much out of luck.  

(Perhaps all the above is implicit when you say "VLAN".  Just making sure...)

Regards,

-- 
Mark M. Hoffman
mhoffman@lightlink.com

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug