Originally posted here by zencoder
This is a new area for me. Can someone briefly explain how you detect cards in promiscuous mode? Not necessarily the software one uses, although that would be helpful...what the software is actually DOING.


proDETECT "proDETECT is an open source promiscuous mode scanner with a GUI. It uses ARP packet analyzing technique to detect adapters in promiscuous mode. This tool can be used by security administrators to detect sniffers in a LAN. It can be scheduled for regular scanning over periods. It also has some advanced reporting capabilities such as SMTP reporting. Full source code is included." read more...