Ethereal-users: Re: [Ethereal-users] Traces left by Ethereal?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: ronnie sahlberg <ronniesahlberg@xxxxxxxxx>
Date: Fri, 3 Jun 2005 15:53:20 +1000
No,  
ethereal will not send any traffic   unless you use name resolution
where ethereal might start talking to the dns server.

however  ethereal will by default set the interface to promisc mode 
which is something that can be detected by other hosts on the same
network,   if they run software to actively probe for NICs that are in
promisc mode.

it is semitrivial to modify a nic to become receive only so that it
will be impossible to detect as being in promisc mode.



On 6/3/05, Tassixar Loknar <loknar_kun@xxxxxxxxxxx> wrote:
> When Ethereal starts capturing packets, does it send out any packets asking
> where everything is, or something traceable like that?
> 
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>