views:

61

answers:

1

Hi I want to put my NIC into promiscuous mode. Why? Because I wrote app which is able potentially to detect sniffing in my local network (send modyfied appropriately ethernet packets). I just want now check it out, so in my second comp I want to set up promisc mode. There's Windows 7 and simply Dell Wireless 1397 WLAN Mini-Card...if it makes a difference.

How can I do this?

+3  A: 

I`ve used wireshark for this sort of thing in the past

paquetp
I misinterpreted the question, wireshark is the way to go
Onkelborg
Yes, I tried this, but sth is wrong. I've checked options "Capture packets in promiscuous mode" on laptop and then I send from PC modified ICMP Request (to correct IP but incorrect MAC address). This is one of the methods of detection sniffing in local network. As far as I know if NIC is in promisc mode it should send ICMP Reply. But there's no reply. Any ideas?
Saint_pl
IP is a layer above MAC (see layer 3 and 2 of OSI model, respectively) - in the end, if you have the wrong MAC, the data link layer will not pass it up to the network layer. ICMP is at the network layer, so it never received your ICMP request.
paquetp
No, I're wrong. You're talking about "normally" situation, but if NIC is in promisc mode it should send answer. Read about Ping test e.g http://www.napolifirewall.com/Sniffers.htm or http://www.linux-sec.net/Sniffer.Detectors/snifferdetection.pdf But if so, then I don't know why I don't get this answer on my PC
Saint_pl
I don't know why, wireshark works on my PC but not on notebook. If notebook is listning and sending request - PC is answering, but vice versa don't work. Any ideas?
Saint_pl