Peter Nixon wrote:
Beware doing this though, as it will not work on alot of switches, as the link tests do not correctly function. Should work fine on hubs though.
You are probably better running a log host over serial if you want it to be invisible...
What if I ifconfig a network interface in promiscuos mode but without an IP address? i.e. DMZ | | net -- ROUTER -- FW ---- LAN | | sniffing eth0 w/o IP addr. How can someone on the network (net) find about the existence of this network card? And, how dangerous (==open to external attacks) is a such configured interface if someone do find it? (assuming the sniffer program checks its inputs and doesn't have buffer overflows, obviously :) Ciao, Roberto.