On Tue, Dec 04, 2001 at 04:08:04AM -0600, Richard Rauch wrote:
> > > I believe that the ideal would be to query the LAN to see which (if any)
> > > machines are talking to it---and from that list, look for familiar IP
>  [...]
> >
> > I guess one could write a tool that put the interface in promiscious mode
> > and lisen for arp packets, and deduce the IP network number from that.
> 
> Hm.  I'd certainly have to read a more to write such a tool.
> 
> (Hm.  If I were to go this route, though, wouldn't tcpdump work?  I seem
> to recall that it lists network traffic that hits the interface, even if
> the traffic isn't desited for the particular machine.  I _can_ rely on
> TCP/IP being used on all of the networks that are of present interest.)

tcpdump could work, you just have to parse the input. But as you said you need
some kind of timeout; it may not be easy to implement using tcpdump.

--
Manuel Bouyer, LIP6, Universite Paris VI.           Manuel.Bouyer@lip6.fr
--