Ethereal-users: Re: [Ethereal-users] sniffing for welchia

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Thu, 8 Jan 2004 10:26:02 -0800
On Thu, Jan 08, 2004 at 04:44:25PM -0000, Richard Urwin wrote:
> Running Ethereal on the machine that gets infected is probably a good idea.
> Then you don't need to run in promiscuous mode, and the traffic thoughput
> will be much smaller.

And you are more likely to see the traffic to that machine even if
you're on a switched network (as per my other mail, with its pointer to
the first item in the "using Ethereal" section of the FAQ, namely the
"fun with capturing on a switched network" FAQ).