Re: Promiscious Device Detection

[Andrew Farmer <andfarm () gmail com>]

On 09 Mar 06, at 04:04, Q Beukes wrote:
> I am looking for linux utility that checks if a specified machine's
> network device is in promiscious mode or not.
>
> c source is prefered so I could maybe modify (if needed) it so it
> actively search for
> such devices and syslog such finds.

You can't search for promisc devices, as they don't advertise them-
selves in any way. Chkrootkit[1], though, will check the local machine
for a promisc interface, as well as other signs of possible badness.

[1]: http://www.chkrootkit.org/

Attachment: PGP.sig
Description: This is a digitally signed message part

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/