Promqry

Promqry can accurately determine if a Modern (Windows 2000 and later) managed Windows system has network Interfaces in promiscuous mode. If a system has network interfaces in promiscuous mode, it may indicate the presence of a network sniffer running on the system.

Promqry cannot Detect standalone sniffers or sniffers running on non-Windows operating systems.