Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
Promiscuous vs Monitoring mode #3
While speaking with network professionals about Debookee Wi-Fi Monitoring (WM) module, I’ve discovered that promiscuous mode is commonly confused with monitoring mode, although they operate on different media, layers & protocols.
Promiscuous mode is not a packet capture mode, it’s an option of Ethernet packet capture.
In non-promiscuous mode, you’ll capture:
In promiscuous mode:
Typically, Debookee NA module must put the interface in promiscuous mode to see intercepted packets from other devices like an iPhone because the destination MAC address is the iPhone’s one, not our own MAC address.
With or without promiscuous mode, Ethernet packet capture works with:
Monitoring mode works specifically for Wi-Fi, allowing to capture packets at the 802.11 radio level, not at the Ethernet level anymore.
In monitoring mode:
Packets seen in monitoring mode:
Packets not seen:
And if you have a Mac, both promiscuous and monitoring mode can easily be tested with the free trial of Debookee.