Dustin Puryear <[EMAIL PROTECTED]> writes: > The Internet-facing interface is in promiscuous mode with cable > Internet? That should be interesting.
Not really. You don't see much more than arp requests. It's quite reminiscent of trying to sniff on a switch port (that's not set up for monitoring of course, just a standard switch port) It only gets interesting when you poison the arp cache (ala dsniff http://naughty.monkey.org/~dugsong/dsniff/). Yes I have done this but at the time it was a network I managed and I wasn't about to bust myself ;). Actually I wanted to see how well it worked -- quite well actually. I would strongly advise against doing this on your cable/dsl connection as it may indeed attract attention. However if you manage a switched lan, you may find some educational benefit in testing it out. -- Scott Harney<[EMAIL PROTECTED]> "...and one script to rule them all."
