Re: Basic question on NIC

# 2 is the answer to question #1. In promiscuous mode with no SPAN set up,
the traffic that will be sniffed is anything unicasted directly to PC
attached, anything boradcasted/multicasted (if PC joins), and anything that
is a unicast flood (basically a broadcast-- uncontrolled unicast).

To monitor a specific device not on that port a monitor session will be
needed.

HTH

Marc

On Fri, Aug 5, 2011 at 4:42 AM, O B <obcert_at_gmail.com> wrote:

> I have setup like this Win-XP PC(NIC turned into promiscuous mode) with
> Ethereal connected gi 0/1 of Cisco SW. I don't have any monitoring port
> configured on SW or port forwarding.
>
> 1. Can I able to watch in Ethereal what all PCs activity?
>
> 2. Sniffing does not work in switched networks? with exception of broadcast
> & multicast?
>
>
> Your thoughts are appreciated in advanced.
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Fri Aug 05 2011 - 10:26:13 ART