Wireshark · Ethereal-users: Re: [Ethereal-users] Traces left by Ethereal?

[LEGO <luis.ontanon@xxxxxxxxx>]

On 6/3/05, ronnie sahlberg <ronniesahlberg@xxxxxxxxx> wrote:
> No,
> ethereal will not send any traffic   unless you use name resolution
> where ethereal might start talking to the dns server.
> 
> however  ethereal will by default set the interface to promisc mode
> which is something that can be detected by other hosts on the same
> network,   if they run software to actively probe for NICs that are in
> promisc mode.

So, it is possible. By any chance, do you have any pointers to
documnetation explaining how?

> it is semitrivial to modify a nic to become receive only so that it
> will be impossible to detect as being in promisc mode.
> 
> 
> 
> On 6/3/05, Tassixar Loknar <loknar_kun@xxxxxxxxxxx> wrote:
> > When Ethereal starts capturing packets, does it send out any packets asking
> > where everything is, or something traceable like that?
> >
> >
> > _______________________________________________
> > Ethereal-users mailing list
> > Ethereal-users@xxxxxxxxxxxx
> > http://www.ethereal.com/mailman/listinfo/ethereal-users
> >
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
> 


-- 
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan