Posted by Eiji James Yoshida on May 14

Hello all,

You can detect a promiscuous interface if you use Windows Management
Instrumentation Command-line (WMIC).

You don’t need PromiscDetect and Promqry.

# Command
wmic /NAMESPACE:\rootwmi PATH MSNdis_CurrentPacketFilter GET

# NDIS_PACKET_TYPE
00000001 1 DIRECTED
00000010 2 MULTICAST
00000100 4 ALL_MULTICAST
00001000 8 BROADCAST
00010000 16 SOURCE_ROUTING
00100000 32 PROMISCUOUS…