Nmap Hackers: Re: Promiscuous mode detection

[Arley Carter <arc () twinds com>]

If you cut the transmit wires on the cable the sniffer will be
undetectable.  Moral of the story, there is no substitute for physical
security.  However, if someone is sniffing the network, you must assume
one of two things:  1. It's a lamer with too much time on his hands.
2.  The data has value.  If it is #2 then the data must be retrieved
physically or transmitted outbound from your net to a destination. 
This is where the fun starts.

Cheers:
-arc

Arley Carter                            Network Engineering & Security
Tradewinds Technologies, Inc.           arc () twinds com
Winston-Salem, NC  USA                  www.twinds.com