Problem
i. What is the difference between a display filter and a capture filter? Give a reason why you might want to use one over the other for each filter type (i.e when is it better to use capture and when is it better to use a display filter?).
ii. Describe the difference in results run in promiscuous mode and not. What does promiscuous mode do, in general? Does your data collection demonstrate what promiscuous mode does or not? Generate a hypothesis about why this is.
iii. While you do not have permissions to configure the switches, if you did, would configuring port mirroring (a term to research) help to capture the desired traffic in this situation? Why or why not?