Wireshark · Ethereal-users: Re: [Ethereal-users] Traces left by Ethereal?

[ronnie sahlberg <ronniesahlberg@xxxxxxxxx>]

No,  
ethereal will not send any traffic   unless you use name resolution
where ethereal might start talking to the dns server.

however  ethereal will by default set the interface to promisc mode 
which is something that can be detected by other hosts on the same
network,   if they run software to actively probe for NICs that are in
promisc mode.

it is semitrivial to modify a nic to become receive only so that it
will be impossible to detect as being in promisc mode.



On 6/3/05, Tassixar Loknar <loknar_kun@xxxxxxxxxxx> wrote:
> When Ethereal starts capturing packets, does it send out any packets asking
> where everything is, or something traceable like that?
> 
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>