On Fri, 7 Dec 2001 08:19:35 +0100 GomoR <[EMAIL PROTECTED]> wrote: > On Wed, 5 Dec 2001 12:57:03 +0100 Christian Steinert > <[EMAIL PROTECTED]> wrote:
>> Found a lot of tools but little description. Surely one of you >> hotshots will know a little more than me... Thanks. Christian. > If it is a paper your are looking for; here is a link: > Detection of Promiscuous Nodes Using ARP Packets > http://www.securityfriday.com/promiscuous_detection_01.pdf Note that an interface in promiscuous mode which has not IP address assigned (and interface does not have to have an assigned address to be alive) will not respond to ARP queries. -- J C Lawrence ---------(*) Satan, oscillate my metallic sonatas. [EMAIL PROTECTED] He lived as a devil, eh? http://www.kanga.nu/~claw/ Evil is a name of a foeman, as I live.