Nmap NSE 6.01: sniffer-detect

Summary
Checks if a target on a local Ethernet has its network card in promiscuous mode. The techniques used are described at http://www.securityfriday.com/promiscuous_detection_01.pdf.