Machine Latencydefined
- Discards packets not addressed to correct MAC address
- Minimal impact on system performance as few interrupts
- Kernel not called in to process unless really needed
- Match criteria == MAC, broadcast, multicast
- All packets must be copied and handed over to OS
- Severe impact on system performance due to maximum interrupts
- Kernel must process packets
- Malicious sniffing often happens in user space – context shift from Kernel to User space is expensive