-1

I have a project that is to protect my box from attack man in the middle arp poison. I should detect if interface mode of other machine is promiscuous.

I must write script python or command linux.

closed as off-topic by RoraΖ, Jens Erat, Stephane, Iszi, M'vy Mar 19 '15 at 14:21

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "This question does not appear to be about Information security within the scope defined in the help center." – Jens Erat, Stephane
If this question can be reworded to fit the rules in the help center, please edit the question.

1

The seminal work on detection of promiscuous interfaces on the network is Detection of Promiscuous Modes using ARP Packets:

...promiscuous mode detection is performed by checking the responses of ARP packets, when ARP request packets are sent to all nodes on the network

I don't know of implementations offhand, but the paper is detailed enough for you to write your own IMHO.

0

I would suggest you to try scapy, if you're doing it on linux. It has great features for the case you need.

https://samsclass.info/124/proj11/proj16x-promscan.html

Not the answer you're looking for? Browse other questions tagged or ask your own question.