This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

USB to Ethernet Adapter and Promiscuous Mode

0

Hello

Is anyone aware of any USB to Ethernet adapters whose chipset/Windows drivers can operate in promiscuous mode?

I need to replace my aging brick of a laptop and my workplace has given me a choice between a cheap laptop with a screen resolution worse than my old one (old is 1280x1024 and new would be 1366x768) or a Microsoft Surface Pro. The Surface Pro has the highest screen res and is the most portable so I'd like to give that a go unfortunately it also has no ethernet port.

Is promiscuous mode even that necessary for packet sniffing? A basic question I know but I've never had problems capturing what I've needed using whatever computer I've had to hand at the time.

Thanks

asked 04 Nov '15, 02:02

llamatron's gravatar image

llamatron
6113
accept rate: 0%


One Answer:

1

I'm using these, and they work fine for me in promiscuous mode:

http://www.amazon.com/Network-Adapter-Anker-Ethernet-Supporting/dp/B00NOP70EC/ref=sr_1_2?ie=UTF8&qid=1446631459&sr=8-2&keywords=anker+ethernet+usb3

I have to say I'm not owning a Surface Pro, but with my Win8.1 Ultrabook (which has no Ethernet ports) they work without a problem.

answered 04 Nov '15, 02:05

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

edited 04 Nov '15, 02:07

Well that's interesting. I was originally looking at this device which is also by Anker:

http://www.ianker.com/product/68ANHUB-U3E1A

It uses Realtek's RTL8153 chipset. I got in touch with Realtek and asked the question and they replied saying no, it's not capable of running in promiscuous mode. I guess the device you've linked to uses a different ethernet chipset.

Thanks

(04 Nov '15, 04:57) llamatron

Very interesting - I have that exact USB3 hub, too, and just tested it - it works fine in promiscuous mode on my HP Switch SPAN port. Saw lots of traffic (with all protocol bindings disabled), so I'd say it works (using Wireshark 2.0.0rc2).

dumpcap -D also lists the adapter.

(04 Nov '15, 06:49) Jasper ♦♦
(05 Nov '15, 04:15) Jasper ♦♦