In this video, we are going to learn what the promiscuous mode is, how it is different from the monitor
mode and how to enable and disable it.
The promiscuous mode is available in the capture options window, so go to the capture, click on options,
capture options displays all the installed network interface cards.
It is pretty much like you would welcome a window, right, as you can see.
But the difference is that capture options gives you a much better control over your interfaces here.
As you can see, we have promiscuous mode column and the monitor mode.
Right.
You can start a new session from Captured Options, a window as well.
All you have to do.
Select the network interface where you want to capture the packets on.
And then down here, click on the start button.
Then it will start a new session.
Okay, back to the capture options.
By default, promiscuous mode is enabled on all the network interface card.
As you can see down here, if you click on this button, enable promiscuous mode, then it is going
to disable, you know, the promiscuous mode on all the interfaces you can manually enable and disable
promiscuous mode on each interface.
Right, like this.
So what is this promiscuous mode in computer networking?
Promiscuous mode is a network of monitoring and administration technique.
Promiscuous a mode allows us to sniff our captured traffic of other devices that are connected to your
network.
But the promiscuous mode works under one specific condition.
It only works if devices are connected to the network through a hub.
Then Wireshark can read and intercept each packet that the hub receives.
Here, we need to understand how the hub works.
Hub is a multiport device.
It allows computers to connect to a network through an Ethernet cable.
Right.
When a hub receives a packet, then it basically signs that package to all the ports or devices that
are connected to it.
And this is what the promiscuous mode exploits by default, your computer or network card, to be specific
only except the packets or frames that are specifically sent to your own MAC address.
Right.
Your computer ignores everything and only accepts packets that are sent to your Mac address.
But when you enable the promiscuous mode, a network card accepts all the packets that it sees whether
they are sent to it or not.
We also have a monitor mode.
Right.
As you can see.
So what is the difference between monitor mode and the promiscuous mode?
Both modes allow us to capture traffic or packets.
Right.
But they operate differently to captured packets with promiscuous mode.
You have to be connected to the network where you want to capture the packets on.
If you are not connected to the network, then promiscuous mode does not work.
But with monitor mode, you don't have to be connected to any network to capture 30 packets.
Monitor Mode can easily capture traffic of all the networks within its range easily without connecting
to them.
Window does not allow or support the monitor mode for security reasons.
As you can see under the Monitor Mode column, we have the check box for monitor mode.
Now let me check it.
As you can see it automatically uncheck immediately.
Windows does not allow the wireless network card to operate in the monitor mode by default.
But on Linux, you can easily put your card in monitor mode and start capturing packets.