Posted on 2012-09-21
A previous thread suggested that since a NIC in promiscuous mode receives
packets destined to other nodes in addition to its own node provided these other nodes are contained in the same broadcast domain (as defined as a set of interconnected nodes on one or multiple switches or Hubs). And thus a sniffer on the node with the promiscuous NIC could endanger the security of the network.
I am confused about one thing. I see this happening with nodes on a hub as the packets are sent to each node (which opens the possibility of collisions)
However, with a switch, only packets destined for each node are routed to that node from the switch, This would prevent collisions. However, wouldn't that mean that a promiscuous NIC on a node on a switch can only
'see' or 'sniff' packets destined to that individual node, not other nodes on the broadcast domain ?