Nmap Hackers: Re: Promiscuous mode detection

[Jon Marler <jmarler () istrength net>]

If you are looking for a tool to scan IP subnets for promiscuous mode
systems, I suggest the hunt package.  You can get the hunt package at
http://www.cri.cz/kra/index.html  

I use it here to regularly scan the subnets of our co-location facility.
You all know as well as I do that the first thing a successful script
cracker does is install some version of linsniff.

Hunt was written to perform MAC spoofing, and connection hijacking.  It
just happens to include code to detect promiscuous systems.

I also have a Debian package made for hunt if anyone is interested.

Jon Marler
jmarler () istrength net
http://www.istrength.net