From: full-disclosure-admin () lists netsys com
[mailto:full-disclosure-admin () lists netsys com] On Behalf Of
Sent: Thursday, March 11, 2004 11:50 AM
To: pbruna () masev cl
Cc: Full Disclosure; SECURITY-BASICS () securityfocus com
Subject: Re: [Full-Disclosure] Caching a sniffer
I skimmed through some of the articles and they all have some
good information. Are you running a switched network? If you
are then the easiest way is to look at your traffic stats and
find the port that
*all* traffic is going to.
If this doesn't make sense to you, then you should do some
more research on sniffers.