I would look at the secuity focus artical.. It says how do detect the promoscius mode on NIC's and that is about all you can do..
Some programs put the NIC in promiscious mode just to work. Snort does beacuse it was designed to work over a network and not for only one host. HTH Craig On Mon, Jan 14, 2002 at 11:12:20AM -0500, [EMAIL PROTECTED] wrote: > How would you go about detecting what NIC's are in promiscuous mode? Is > there some sort of mass ping to find such a thing out? > > -----Original Message----- > From: Craig Van Tassle [mailto:[EMAIL PROTECTED]] > Sent: Friday, January 11, 2002 3:09 AM > To: secuirty-basics > Subject: Re: How can I detect someone sniffing my network? > > > If you are on the same sub-net the only way would be to find out who has > there NIC in promiscous mode. If its out on the web AFAIK its not possible. > > Sniffing is a passive "attack" and is very hard to detect. If you are worred > about someone sniffing you passwords the i would recomend implementing some > form of encryption to prevent this. > That is the best way to stop someone from watching what you send. > > HTH > Craig > > On Wed, Jan 09, 2002 at 12:13:20AM -0200, Mario Camara wrote: > > Can someone help me with that? > > > > � > > > > M�rio C�mara > > [EMAIL PROTECTED] > > [EMAIL PROTECTED] > > ICQ: 331 335 > >
msg02932/pgp00000.pgp
Description: PGP signature
