Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This is what man ifconfig has to say about it.


   Enable or disable the promiscuous mode of the interface.  If

selected, all packets on the network will be received by the interface.

Looking for specifically if this means in regards to a wireless card:

  • accept all despite the IP destination (as I read it, clued by packets);
  • accept all frames despite the MAC address;
  • or, accept all frames and packets periods.
share|improve this question
up vote 12 down vote accepted

Generally speaking, "promiscuous mode" means that a network interface card will pass all frames received up to the operating system for processing, versus the traditional mode of operation wherein only frames destined for the NIC's MAC address or a broadcast address will be passed up to the OS. Generally, promiscuous mode is used to "sniff" all traffic on the wire.

Wireless Ethernet NICs are a bit of a different animal than wired NICs, though. Unlike a wired medium, the wireless medium has additional concerns (association with a given access point, selection of a given channel). For "sniffing" of wireless Ethernet traffic you generally need a wireless NIC and an OS driver that support an "RF monitoring mode" versus promiscuous mode.

Some decent references:

share|improve this answer
right, so promisc is a level two pass-through to OS. – Evan Carroll Jan 27 '10 at 2:48
Mostly. With 802.11 NICs, though, it's more like "layer 2 and a half"... – Evan Anderson Jan 27 '10 at 2:49

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.