Link to home
Start Free TrialLog in
Avatar of StickyDragon
StickyDragon

asked on

How to turn off promiscuous mode on a NIC?

My boss is getting tons of traffic going through his NIC, and would like it to stop. I have determined that his card is most likely running in promiscuous mode and is accepting all the packets thaqt come through the network. How do I turn this off? I can't find the option anywhere.

He is using Windows 2000

Thanks.
Avatar of magus123
magus123

What tool is claiming that there are lots of packets coming through?

What does the network infrastructure look like (hubs, switches, etc)?
Avatar of StickyDragon

ASKER

This is when you right-click the LAN connection and choose "Status" from the drop-down.
From the little bit of information that you have given it is very difficult to truly determine what the problem is.  It sounds like you are trying to treat the symptom and not the problem.

If you could answer some of the following questions we may be better able to help you:

1. How big is your network?
2. As PennGwyn asked, what type of network hardware are you using? (switches, hubs, etc.)
3. How old is the hardware attached to your network?

You can see where I'm going with this.  Any other information that you could offer would make this problem much easier to solve.

You may also want to stick a sniffer on your network to see if you have a chattering NIC or an employee that loves to watch or listen to streaming media while working.

Regards,
Dave...
ASKER CERTIFIED SOLUTION
Avatar of axelt
axelt

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Definitely no viruses, we have Norton corporate, up to date definitions. Tried Ethereal. Neat program, seems that my boss is getting mostly TCP packets (whereas as I get TCP/UCP/ARP pretty evenly (And IPX for some reason, even though it isn't used). He seems to have a lot of TCP traffic coming from the Exchange server for one, and I don't for some reason. Why would this traffic be sent to one PC and not another?

1. We have about 150-200 computers
2. We have switches and hubs (all 3com rack-mount ones), but we are all connected into the same hub.... I did however move him to a switch and he had the same problem still.
Turns out it was nothing more than a driver issue with 3Com 3C920 cards! Update your drivers if you ever run into this problem.