Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: Caching a sniffer
From: Tim <tim-security () sentinelchicken org>
Date: Wed, 10 Mar 2004 19:59:58 -0800

How can i know if there a sniffer running in my network?

There was a long thread on this subject in February on focus-ids:

One link to an interesting paper posted there:

There may be other ways, but the approach described in the paper would
probably work in most cases provided the interface in question was
configured with an IP.  Then again, I may not know what the hell I am
talking about...


Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]