2003-01-06 -+- Herge -+- -+- neped is a very old tool wich only works with Linux kernels before 2.0.36 (4 years old). Antisniff should work better, but there is no magic bullet for remotely finding promiscuous systems. -+- 62.147.143.170 = Mozilla/5.0 (compatible; Konqueror/3; Linux) 2003-01-07 -+- Herge -+- -+- Also note that portsentry is non-free software. Ippl should be used instead.
And ifconfig will NOT show an interface in promiscuous mode if the program putting the interface
in promiscuous mode is using libpcap. -+- 62.147.142.22 = Mozilla/5.0 (compatible; Konqueror/3; Linux) 2003-01-28 -+- Alex Wallace -+- -+- Excelent article! And debian certainly is the best distrio IMHO. -+- 66.136.203.133 = Mozilla/5.0 (compatible; Konqueror/3.1; Linux) 2003-01-28 -+- Rémi Letot -+- -+- tripwire being nonfree, it can be replaced by aide. -+- 212.100.182.212 = Mozilla/5.0 Galeon/1.2.5 (X11; Linux i686; U;) Gecko/20020623 Debian/1.2.5-0.woody.1 2003-02-03 -+- Ilya -+- -+- > tripwire being nonfree, it can be replaced by aide.

Debian Woody also comes with Integrit, which replaces Tripwire -+- 212.116.224.238 = Mozilla/5.0 (compatible; Konqueror/2.2.2; Linux) 2004-03-24 -+- eric draven -+- -+- nicely written. there are some gotchas, though:

in the tripwire section, you wrote :

tripwire -m i 2

this doesn't work at all; or, is this intentional? -+- 203.87.132.164 = Mozilla/5.0 (compatible; Konqueror/2.2.2; Linux) 2005-05-16 -+- larry -+- larry@linuxstore.se -+- Thanks for well written info and good talkback; wonder how much of it now (5/2005) is outdated? Tips on how/where to update info is much appreciated. -+- 213.89.221.247 = Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.3) Gecko/20041007 Galeon/1.3.17 (Debian package 1.3.17-2)