Nmap Announce mailing list archives

Re: Promiscuous mode detection


From: Andrew Brown <atatat () atatdot net>
Date: Thu, 4 Mar 1999 16:34:08 -0500

The Attached src should do what you ask

the attached source only detects interfaces in promiscuous mode on the
local machine.

this can be accomplished by doing

% echo "interface(s)" `ifconfig -a | grep -B3 PROMISC | grep -i mtu | cut -d' ' -f1` "are in promiscuous mode"

and reading the one line of output.  remove the -B3 to deal with just
about every other flavor unix.

is what you really want, bruce, something that will detect them
remotely?  that's a lot harder...kinda like trying to guess if the
person sitting next to you is eavesdropping on your phone
conversation.

-- 
|-----< "CODE WARRIOR" >-----|
codewarrior () daemon org             * "ah!  i see you have the internet
twofsonet () graffiti com (Andrew Brown)                that goes *ping*!"
andrew () crossbar com       * "information is power -- share the wealth."


Current thread: