> Does anyone know of a tool that will allow me to snoop on a live telnet
> session? I'd like to be able to run this on a firewall to see sessions as
> they pass through. Sort of like what ethereal does with "follow TCP
> Stream", but live.
Absolutely. Snort (www.snort.org) can do this. Check Lance
Spitzner's papers from the Honeynet project
(http://www.enteract.com/~lspitz/papers.html) on what to do with
it and how (and check the snort docu for details).
Cheers, Jan
--
Radio HUNDERT,6 Medien GmbH Berlin
- EDV -
j.muenther_at_radio.hundert6.de
Received on Nov 30 2000