Honeypots: RE: undetectable NIC in promiscuous mode

[Román Ramírez <rramirez () chasethesun es>]

> If it was plugged into a switch port, *and* you monitor the 
> switch stats, you would see the system receiving data but 
> never transmitting. 
 
> Beyond that, your hosed. ;-)

Of course you can try to use a honeytoken.