how to find out promiscuous mode
Gilboa Davara
gilboad at gmail.com
Thu Feb 4 07:06:27 UTC 2010
On Wed, 2010-02-03 at 23:11 +0100, Vadkan Jozsef wrote:
> How can I find out that someone is using it's network card in
> promiscuous mode in a subnet?
>
> Thank you!
>
You can't.
... and even if you could, someone could potentially use a passive
splitter and yank all the packets of the subnet.
Having said all that, if your network is switched (as opposed to using
cheap FE hubs), only broadcast traffic (ARP/DHCP/etc) will be visible in
promisc mode.
- Gilboa
More information about the users
mailing list