While troubleshooting a connectivity issue today i discovered that my wireshark capture was grabbing packets destined from a remote server to another remote server.
I am a little confused by this since i thought that
- Under normal circumstances I should not see promiscuous data in a switched networks
- one of the causes that Could possible cause this to happen is by arp floods. I monitored arp traffic on the network & I do not see extraordinary arp traffic.
What could be causing promiscuous data to be captured on a switched network?
Could anyone shed some light on this?