I seem to recall something about some NIC not going into promisc. mode, but I don't remember the details.
An easy way to test is to put a hub in between your ISP router and your network.
ISP-------hub----------network
\sniffer
Then simply plug into this hub and fire up the sniffer. If you can see all the packets then you should investigate your hub/switches if you still can't see all the traffic then it's your NIC card.
PS in ethereal check your filters.
Mike
-----Original Message-----
From: Jason Brown [mailto:[EMAIL PROTECTED]]
Sent: Friday, June 15, 2001 2:56 PM
To: [EMAIL PROTECTED]
Subject: RE: Network Sniffers
No, it's all hubs. Some of the hubs have 2 port bridges built in, but I put
the sniffer on the same hub as the Internet connection, therefore I should
see everything.
Jason
>are you on a switched network? you have to setup a mirrored port on your
>switch if you are, switches can not see all traffic like a hub can.
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls
