Question about a feature of ntop

[Thomas Kuehling <thomas.kuehling () teka-web de>]

Dear all,

as i read in an overwiev-paper 
(http://ntop.ethereal.com/ntop-overview.pdf) it should be possible to 
detect NICs in promiscuous mode. Is this correct and how does this work? 
I don't understand how ntop will detect this only by analyzing the 
traffic on a gateway for example and not on the local-machine where the 
NIC is in this mode?

Regards
Thomas Kuehling

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
------------------------------------------------------------------------