If a network device is in promiscuous mode, the kernel will receive all network traffic (i.e., the CPU load will increase). Then the latency of network responses will also increase, which can be detected.
promisc mode is a configuration of a network card that makes the card pass all traffic it receives to the central processing unit rather than just frames addressed to it — a feature normally used for packet sniffing.
Each frame includes the hardware (Media Access Control) address. When a network card receives a frame, it normally drops it unless the frame is addressed to that card. In promiscuous mode, however, the card allows all frames through, thus allowing the computer to read frame intended for other machines or network devices.
Many operating systems require superuser privileges to enable promiscuous mode. Ifconfig command can be used to enable this mode
Enable or disable the promiscuous mode of the interface. If
selected, all packets on the network will be received by the
interface.
Leave a Reply
You must be logged in to post a comment.
