I have a project that is to protect my box from attack man in the middle arp poison. I should detect if interface mode of other machine is promiscuous.

I must write script python or command linux.

closed as off-topic by RoraΖ, Jens Erat, Stephane, Iszi, M'vy Mar 19 '15 at 14:21

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "This question does not appear to be about Information security within the scope defined in the help center." – Jens Erat, Stephane
If this question can be reworded to fit the rules in the help center, please edit the question.


The seminal work on detection of promiscuous interfaces on the network is Detection of Promiscuous Modes using ARP Packets:

...promiscuous mode detection is performed by checking the responses of ARP packets, when ARP request packets are sent to all nodes on the network

I don't know of implementations offhand, but the paper is detailed enough for you to write your own IMHO.


I would suggest you to try scapy, if you're doing it on linux. It has great features for the case you need.


Not the answer you're looking for? Browse other questions tagged or ask your own question.