ifstatus 4.0
Summary
Description: Detect promiscuous network
Source: http://www.cymru.com/Tools/index.html
Support
This package is available for all platforms. This package is unsupported and provided on an as-is basis.
Description
ifstatus checks all network interfaces on the system, and reports any that are in debug or promiscuous mode, which may be a sign of unauthorized access to the system. ifstatus unfortunately doesn't support all of the types of interfaces in current versions of Solaris, but does support the basic eth and hme interfaces and some of the newer ones (and won't cause any harm on systems with interfaces it doesn't support).
Usage
If any system interface is in promiscuous mode, ifstatus prints out a loud warning message; otherwise, it's silent. This makes it suitable for running from cron as root on a regular basis, since that will cause the system to send mail if a promiscuous interface is detected.
ifstatus doesn't support Solaris 7 at all (it will always report that no interfaces are promiscuous) and it only supports the hme interface under Solaris 8. If your system is running Solaris 8 in 64-bit mode, use /usr/pubsw/sbin/ifstatus64.
Files
Programs: ifstatus Man Pages: ifstatus(8)
Accuracy
This information reflects the version of this package that is installed in Stanford's site-wide pubsw software tree. Newer versions of the package may be available from the package source. The contents of this page, including the source URL if applicable, are generally only reviewed when the package is upgraded and therefore may not accurately reflect the current version of the package.
