3 ms·
At the LAN level it is possible to detect hosts whose NIC is operating in promiscuous mode, which is likely for someone sniffing network traffic: http://securi
by jburgess777 10y ago
At the LAN level it is possible to detect hosts whose NIC is operating in promiscuous mode, which is likely for someone sniffing network traffic:
http://security.stackexchange.com/questions/3630/how-to-find-out-that-a-nic-is-in-promiscuous-mode-on-a-lan http://security.stackexchange.com/questions/3630/how-to-find...
- dogma1138 10y agoThat only works on "switch" level mostly, on a modern network you also are likely to trigger on your own switches since they run in a pseudo-promiscious (usually marketed as IP Helper, Broadcast Helper, Broadcast Redirect, DNS Helper etc.) mode to facilitate DNS and other protocols that rely on broadcasts to pass through the switch (or VLAN) boundary. This is however more in relation to intrusion detection not active countermeasures.
- deleted 10y ago[deleted]