The sniffing interface is completely unbound from the TCp/ip stack by default Assuming the defaults were used how can you detect these sniffing interfaces?