I don't *think* ntop can do this, nor any passive monitor. Unless of course the host is doing "bad" stuff, like replying to ARP's for other hosts, etc.
________________________________ From: [email protected] <[email protected]> To: [email protected] <[email protected]> Sent: Sun Mar 21 07:31:19 2010 Subject: [Ntop] Detecting promiscuous nodes. How to detect nodes on the network that have NIC running in promiscuous mode using NTOP? <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
