Figure 4 - Sample Tool Abstract


Ifstatus - check network interface status

Author: David A. Curry (davy@vnet.ibm.com)

Ifstatus checks all network interfaces on the system, and reports any that are in debug or promiscuous mode, which may be a sign of unauthorized access to the system. Ifstatus reports this information in a format suitable for running the check from cron.

If the -v option is specified, ifstatus will print the name of each interface and the hexadecimal representation of the interface's flags word. Without the -v option, ifstatus only produces output for problematic interfaces.

Keywords: network interfaces; network monitoring; network/system status; intrusion detection; threat analysis.