答复: Counter detect Network Sniffer

From: Peng Xuena (pengxn_at_neusoft.com)
Date: 02/24/04

  • Next message: Tarek Amr Abdullah: "Port/Host Scanning Techniques" 
    Date: Tue, 24 Feb 2004 12:45:05 +0800
To: Poulsennet Securityfocus <securityfocus@poulsennet.com>, 'Bill Mok' <billmok2002@yahoo.com.hk>

    it seems that proDetect doesn't work well in detecting network cards in promiscuous mode.
    I tried this tool in my network. Thought several hosts in this network is in promiscuous mode, only
    the gateway is reported to be in promiscuous mode.

    ' Hi Bill,

    'You need to find a tool that can scan your network for network cards in
    'promiscuous mode (also called "Sniffer Mode"). An open source tool
    '(PROdetect) is available at http://www.cmpe.boun.edu.tr/~tas/

    'Kind Regards
    'Michael Poulsen, CISSP

    -----Original Message-----
    From: Bill Mok [mailto:billmok2002@yahoo.com.hk]
    Sent: 19 February 2004 04:50
    To: focus-ids@securityfocus.com
    Subject: Counter detect Network Sniffer

    Is there any method to detect one using sniffer, say ethereal, in the same
    network?


    _________________________________________________________
    必殺技、飲歌、小星星...
    浪漫鈴聲 情心連繫
    http://us.rd.yahoo.com/evt=22281/*http://ringtone.yahoo.com.hk/

    ---------------------------------------------------------------------------
    Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

    Protect your network with the comprehensive security solution that
    integrates six applications for ease of use and lower TCO.

    Firewall - Virus protection - Spam protection - URL blocking - VPN
    - Wireless security.

    Download 30-day evaluation at:
    http://www.securityfocus.com/sponsor/Astaro_focus-ids_040219
    ---------------------------------------------------------------------------






    ---------------------------------------------------------------------------
    Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

    Protect your network with the comprehensive security solution that integrates
    six applications for ease of use and lower TCO.

    Firewall - Virus protection - Spam protection - URL blocking - VPN
    - Wireless security.

    Download 30-day evaluation at:
    http://www.securityfocus.com/sponsor/Astaro_focus-ids_040219
    ---------------------------------------------------------------------------

  • Next message: Tarek Amr Abdullah: "Port/Host Scanning Techniques"

    Relevant Pages

    • RE: Preventing OS Detection
      ... Once you've gotten your network packets tweaked so ... If I go to http://uptime.netcraft.com and enter my website, ... Astaro Security Linux -- firewall with Spam/Virus Protection ...
      (Focus-Microsoft)
    • Re: Keen to test out root kits
      ... I am keen to test out root kits on my lap-top. ... lap-top / home network? ... Astaro Security Linux -- firewall with Spam/Virus Protection ...
      (Security-Basics)
    • RE: Counter detect Network Sniffer
      ... Subject: Counter detect Network Sniffer ... Astaro Security Linux -- firewall with Spam/Virus Protection ... Download 30-day evaluation at: ...
      (Focus-IDS)
    • RE: Penetration Whitepapers
      ... For 'real life example' I would also recommand the following books: ... Test Your Network Security & Forensic Skills ... Stealing the Network: ... Astaro Security Linux -- firewall with Spam/Virus Protection ...
      (Pen-Test)
    • RE: Keen to test out root kits
      ... What other stuff can I try with the rootkits? ... Astaro Security Linux -- firewall with Spam/Virus Protection ... Protect your network with the comprehensive security solution that ...
      (Security-Basics)