Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: Caching a sniffer
From: Chris Adams <chris () improbable org>
Date: Wed, 10 Mar 2004 19:25:37 -0800

On Mar 10, 2004, at 13:13, Patricio Bruna V. wrote:
How can i know if there a sniffer running in my network?

You might catch someone sloppy with tricks like DNS resolution (send data with a hostname / IP and see who resolves it) or bugs in the way the sniffing host handles things like ARP resolution (search for antisniff if you want a tool which does this) - other than that, there's really no way to find a sniffer. Your best bet is to use strong encryption so it no longer matters if someone is sniffing traffic.


Attachment: smime.p7s

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]