[skyfolly]

Checking `asp'... not infected
Checking `bindshell'... not infected
Checking `lkm'... nothing detected
Checking `rexedcs'... not found
Checking `sniffer'...
eth0 is not promisc
Checking `wted'... nothing deleted
Checking `w55808'... not infected
Checking `scalper'... not infected
Checking `slapper'... not infected
Checking `z2'...

??

eth0 is not promise???

[genlee]

Means it is not in promiscious mode which is most commonly used to sniff packets.

[skyfolly]

ha ha ha, i am so dumb, still dun get it, anyway, thanks

[Dolda2000]

Normally, a NIC will only process packets that were headed for it. For example, if you're using a hub (instead of a switch) to connect your computers, all packets will be sent to all computers, but the NIC will discard all packages that weren't intended for it. Putting it into promiscuous mode means that it will receive all packages, so that you can monitor packets that were sent between other computers in your network.

[skyfolly]

how do i do it? thanks

[Dolda2000]

Hmm? Why would you want to?

[skyfolly]

make eth0 promisc??? he he, nevamind

[craig_mcd]

ifconfig <device> promisc

Normally you dont need to turn enable it as most apps that require promiscuous mode will enable it for you, like tcpdump for example.

[skyfolly]

I see, cheers mate!!!

[andutt]

Use the command tcpdump to see all packets that "goes throw" you NIC...in hubbed environments you can for example see username and password in cleartext on hosts that have FTP-servers...can be fun..