Re: [Full-disclosure] Promiscious Device Detection

2006-03-10 Thread Michael Holstein
You can't search for promisc devices, as they don't advertise them- selves in any way. Chkrootkit[1], though, will check the local machine for a promisc interface, as well as other signs of possible badness. Not entirely true .. you can use things like antisniff to spoof ARP packets and see wha

Re: [Full-disclosure] Promiscious Device Detection

2006-03-09 Thread Andrew Farmer
On 09 Mar 06, at 04:04, Q Beukes wrote: I am looking for linux utility that checks if a specified machine's network device is in promiscious mode or not. c source is prefered so I could maybe modify (if needed) it so it actively search for such devices and syslog such finds. You can't search f

Re: [Full-disclosure] Promiscious Device Detection

2006-03-09 Thread Michael Holstein
I am looking for linux utility that checks if a specified machine's network device is in promiscious mode or not. packetstormsecurity.org/sniffers/antisniff/ Not free though. ~Mike. ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.o

Re: [Full-disclosure] Promiscious Device Detection

2006-03-09 Thread Q Beukes
i know how it would be done. just thought if i could find the code/tool it could save me alot of time. Simon Richter wrote: > Hi, > > Q Beukes wrote: > >> I am looking for linux utility that checks if a specified machine's >> network device is in promiscious mode or not. > > Technically, promiscu

Re: [Full-disclosure] Promiscious Device Detection

2006-03-09 Thread Frank Thyes
+++ Q Beukes [Thu, Mar 09, 2006 at 01:04:50PM CET]: > Hey, > > I am looking for linux utility that checks if a specified machine's > network device is in promiscious mode or not. > > c source is prefered so I could maybe modify (if needed) it so it > actively search for > such devices and syslog

Re: [Full-disclosure] Promiscious Device Detection

2006-03-09 Thread Simon Richter
Hi, Q Beukes wrote: I am looking for linux utility that checks if a specified machine's network device is in promiscious mode or not. Technically, promiscuous mode only affects packet reception, so it is pretty difficult to detect; however most packet sniffers will not hide the packets that

[Full-disclosure] Promiscious Device Detection

2006-03-09 Thread Q Beukes
Hey, I am looking for linux utility that checks if a specified machine's network device is in promiscious mode or not. c source is prefered so I could maybe modify (if needed) it so it actively search for such devices and syslog such finds. Thx Q Beukes __