nerdexam
GIAC

GCFA · Question #280

The promiscuous mode is a configuration of a network card that makes the card pass all traffic it receives to the central processing unit rather than just packets addressed to it. Which of the…

The correct answer is C. Sniffer. A network sniffer places the host NIC into promiscuous mode to capture all traffic on the segment, not just packets addressed to that host.

Advanced Incident Response & Digital Forensics Fundamentals

Question

The promiscuous mode is a configuration of a network card that makes the card pass all traffic it receives to the central processing unit rather than just packets addressed to it. Which of the following tools works by placing the host system network card into the promiscuous mode?

Options

  • ASnort
  • BTHC-Scan
  • CSniffer
  • DNetStumbler

How the community answered

(23 responses)
  • A
    4% (1)
  • B
    13% (3)
  • C
    74% (17)
  • D
    9% (2)

Why each option

A network sniffer places the host NIC into promiscuous mode to capture all traffic on the segment, not just packets addressed to that host.

ASnort

Snort is an intrusion detection and prevention system (IDS/IPS) that may use promiscuous mode as part of its sensor configuration, but its primary classification and design purpose is threat detection rather than traffic capture and analysis.

BTHC-Scan

THC-Scan is a war dialer used to scan telephone numbers for modems and remote access systems, and it has no relationship to NIC promiscuous mode or packet capture.

CSnifferCorrect

A Sniffer (such as Network General Sniffer or NETSCOUT Sniffer) is a protocol analyzer specifically designed to operate by setting the network interface card into promiscuous mode, allowing it to capture every packet traversing the network segment regardless of destination MAC address. Promiscuous mode bypasses the NIC's normal address filtering, enabling full traffic capture for deep analysis. This promiscuous mode operation is the defining technical characteristic that separates dedicated packet sniffers from other network tools.

DNetStumbler

NetStumbler is a wireless network discovery tool used to detect 802.11 Wi-Fi access points and does not function by placing the host NIC into promiscuous mode for wired packet capture.

Concept tested: Network sniffer promiscuous mode packet capture

Source: https://www.netscout.com/product/network-sniffer

Topics

#promiscuous mode#network sniffer#packet capture#NIC

Community Discussion

No community discussion yet for this question.

Full GCFA Practice