PromiscDetect
Download v1.0 (for Windows NT 4.0 / 2000 / XP / 2003 / Vista)
PromiscDetect checks if your network adapter(s) is running in promiscuous mode, which may be a sign that you have a sniffer running on your computer.
Download the exe file and run it from the Command Prompt.
Q: What would be the response for an adapter in "normal" mode?
A: It would be the filters Directed, Multicast and Broadcast.
Q: When I double-click on the client file a window comes up and disappears immediately. What's wrong?
A: You must run the file from a Command Prompt.
Q: How reliable is this tool?
A: It's reliable as long as the attacker doesn't intercept and modify things somewhere between the tool and the adapter. Look at it this way: if the tool tells you that the adapter is in promiscuous mode it probably is - but if it doesn't you shouldn't just assume that the adapter isn't in promiscuous mode.
Q: My adapter is in promiscuous mode but there's no sniffer in my computer. What's wrong?
A: For example, VMWare puts your adapter in promiscuous mode even if you're not running a sniffer.
Q: I have a question that is not covered here. Where can I get help?
A: Send me your question. I can't promise that I will have time to answer, but I'll do my best.
Introduction
PromiscDetect checks if your network adapter(s) is running in promiscuous mode, which may be a sign that you have a sniffer running on your computer.
Usage instructions
Download the exe file and run it from the Command Prompt.
Q&A
Q: What would be the response for an adapter in "normal" mode?
A: It would be the filters Directed, Multicast and Broadcast.
Q: When I double-click on the client file a window comes up and disappears immediately. What's wrong?
A: You must run the file from a Command Prompt.
Q: How reliable is this tool?
A: It's reliable as long as the attacker doesn't intercept and modify things somewhere between the tool and the adapter. Look at it this way: if the tool tells you that the adapter is in promiscuous mode it probably is - but if it doesn't you shouldn't just assume that the adapter isn't in promiscuous mode.
Q: My adapter is in promiscuous mode but there's no sniffer in my computer. What's wrong?
A: For example, VMWare puts your adapter in promiscuous mode even if you're not running a sniffer.
Q: I have a question that is not covered here. Where can I get help?
A: Send me your question. I can't promise that I will have time to answer, but I'll do my best.