mailing list archives
Re: Caching a sniffer
From: Tim <tim-security () sentinelchicken org>
Date: Wed, 10 Mar 2004 19:59:58 -0800
How can i know if there a sniffer running in my network?
There was a long thread on this subject in February on focus-ids:
One link to an interesting paper posted there:
There may be other ways, but the approach described in the paper would
probably work in most cases provided the interface in question was
configured with an IP. Then again, I may not know what the hell I am
Full-Disclosure - We believe in it.
Re: Caching a sniffer Bob Radvanovsky (Mar 12)