Honeypots mailing list archives

RE: undetectable NIC in promiscuous mode


From: Román Ramírez <rramirez () chasethesun es>
Date: Fri, 5 Mar 2004 18:12:06 +0100

If it was plugged into a switch port, *and* you monitor the 
switch stats, you would see the system receiving data but 
never transmitting. 
 
Beyond that, your hosed. ;-)


Of course you can try to use a honeytoken.


Current thread: