Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: Re: [Ethereal-users] Help

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date: Thu, 7 Apr 2005 20:29:03 +0200
>  Hi all,
>              Is it true that ethereal is not able to capture all data...if
> yes then how can we find that ethereal is not capturing all data......

Yes and no, it depends on your network setup.

Some years ago in the  l0pht.com site it said they have a system to
detect whether or not a card in a network was in promiscuous mode, I
personally did not took it seriously (as a matter of fact the paper
has disappeared from the @stake site). The only reference to it I
could found googling was
http://www.securityfocus.com/tools/category/74 .
I am ready to bet a huge sum that it doesn't work, but I cannot say
that under oath.

Anyway security in your network should not depend on a third party not
being able to listen. As a rule of thumb If there's sensitive data USE
encryption.