mailing list archives
Re: Caching a sniffer
From: Chris Adams <chris () improbable org>
Date: Wed, 10 Mar 2004 19:25:37 -0800
On Mar 10, 2004, at 13:13, Patricio Bruna V. wrote:
How can i know if there a sniffer running in my network?
You might catch someone sloppy with tricks like DNS resolution (send
data with a hostname / IP and see who resolves it) or bugs in the way
the sniffing host handles things like ARP resolution (search for
antisniff if you want a tool which does this) - other than that,
there's really no way to find a sniffer. Your best bet is to use strong
encryption so it no longer matters if someone is sniffing traffic.
Re: Caching a sniffer Bob Radvanovsky (Mar 12)