How can I detect mode interface of other machine is promiscuous

Question

I have a project that is to protect my box from attack man in the middle arp poison. I should detect if interface mode of other machine is promiscuous.

I must write script python or command linux.

[Duplicate](http://security.stackexchange.com/q/3630/13909)? — MCW, Mar 19 '15 at 13:29

score 1 · Answer 1 · answered Mar 19 '15 at 12:32

The seminal work on detection of promiscuous interfaces on the network is Detection of Promiscuous Modes using ARP Packets:

...promiscuous mode detection is performed by checking the responses of ARP packets, when ARP request packets are sent to all nodes on the network

I don't know of implementations offhand, but the paper is detailed enough for you to write your own IMHO.

score 0 · Answer 2 · answered Mar 19 '15 at 12:39

0

I would suggest you to try scapy, if you're doing it on linux. It has great features for the case you need.

https://samsclass.info/124/proj11/proj16x-promscan.html

answered Mar 19 '15 at 12:39

balex

272
1
11

How can I detect mode interface of other machine is promiscuous

2 Answers2