I have a question about network interface Promiscuous mode,
A NIC in promiscuous mode can receive all data passing through it regardless of whether the destination address of the data is it. If the NIC's working mode is set to "promiscuous mode" by the program, the NIC will accept all data frames flowing through it.
and if the interface is not in promiscuous mode, what't that mean? is it will check MAC address and drop rubbish packages and it will check IP address and drop rubbish packages?
but I think if the package is not to a Host's application, all will drop too.
what's the essence distinction between promiscuous mode
and not promiscuous mode
?
and the other question is, we know there have many softwares which can capture packages, such as Wireshark, Sniffer, and tcpdump, where is the capture point? when a package comes into a NIC, where will the software capture it?
Let NIC promiscuous mode and not, why say this will impact the software's capture packages?