[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <8C9EB000-3C32-4118-9649-1653944B2BAF@gmail.com>
Date: Fri Mar 10 01:04:26 2006
From: andfarm at gmail.com (Andrew Farmer)
Subject: Promiscious Device Detection
On 09 Mar 06, at 04:04, Q Beukes wrote:
> I am looking for linux utility that checks if a specified machine's
> network device is in promiscious mode or not.
>
> c source is prefered so I could maybe modify (if needed) it so it
> actively search for
> such devices and syslog such finds.
You can't search for promisc devices, as they don't advertise them-
selves in any way. Chkrootkit[1], though, will check the local machine
for a promisc interface, as well as other signs of possible badness.
[1]: http://www.chkrootkit.org/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 186 bytes
Desc: This is a digitally signed message part
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060309/2b38e0e1/PGP.bin
Powered by blists - more mailing lists