I'm snooping on the same interface. If I was really in promiscuous mode,
then I'm assuming I would see a lot more traffic than I am seeing (this
is a very busy net segment). According to the man pages for tcpdump,
though, I can keep it from going into promiscuous mode (which is what I
did).
-p Don't put the interface into promiscuous mode.
Note that the interface might be in promiscuous for
some other reason; hence, `-p' cannot be used as an
abbreviation for `ether host {localhost} or broad-
cast'.
As far as it already being in that mode, should I not believe ifconfig?
-- ------------------------------------------------------------------------ Joel D. Kraft | Case Western Reserve University ____ jdk6@po.cwru.edu | Department of Computer Engineering & Science \ / --------------------------------------------------------------------\/--