Currently Being ModeratedJul 2, 2012 11:51 PM (in response to markb656)
I think that all OSX versions from 10.4.3 have supported promiscuous mode on the NIC. I'd be surprised if the adapter didn't. Are they available yet? If so, perhaps someone that has one will respond. If not, that's just bad business.
Currently Being ModeratedJul 3, 2012 2:29 AM (in response to clintonfrombirmingham)
Thanks for your reply, However the promiscuous mode function that I am after is a function of the Ethernet NIC hardware and driver not just the OS.
Wireshark allows the user to put network interface controllers that support promiscuous mode into that mode, in order to see all traffic visible on that interface, not just traffic addressed to one of the interface's configured addresses and broadcast/multicast traffic.
Anyone out there actually used/tested the thunderbolt Ethernet adapter to sniff traffic with wireshark (Ethereal), can you please if it can run in promiscuous mode ?
Currently Being ModeratedAug 31, 2012 12:56 AM (in response to markb656)
A friend and I just tested promiscuous mode on a MacBook Pro with Retina Display ("rMBP") using the Thunderbolt to Gigabit Ethernet adapter.
Test setup: rMBP and my MacBook Pro connected via Ethernet cables to a 10Base-T hub (old school!), plus a third Ethernet cable from the hub to the rest of the LAN. Running tcpdump on the rMBP, it was able to see all traffic between my MacBook Pro and the LAN.
He didn't have Wireshark/Ethereal installed so we didn't test that, but Wireshark uses the same mechanisms as tcpdump, so it should be fine.
Currently Being ModeratedSep 1, 2012 1:36 AM (in response to David Empson)
Indeed it does work fine (tested on two adaptors here).