Nmap Hackers: Re: Promiscuous mode detection

[Andrew Brown <atatat () atatdot net>]

> The Attached src should do what you ask
the attached source only detects interfaces in promiscuous mode on the
local machine.

this can be accomplished by doing

% echo "interface(s)" `ifconfig -a | grep -B3 PROMISC | grep -i mtu | cut -d' ' -f1` "are in promiscuous mode"

and reading the one line of output.  remove the -B3 to deal with just
about every other flavor unix.

is what you really want, bruce, something that will detect them
remotely?  that's a lot harder...kinda like trying to guess if the
person sitting next to you is eavesdropping on your phone
conversation.

-- 
|-----< "CODE WARRIOR" >-----|
codewarrior () daemon org             * "ah!  i see you have the internet
twofsonet () graffiti com (Andrew Brown)                that goes *ping*!"
andrew () crossbar com       * "information is power -- share the wealth."