Re: Counter detect Network Sniffer

From: Vel (vel_at_sympatico.ca)
Date: 03/01/04

  • Next message: Sam f. Stover: "Re: Counter detect Network Sniffer" 
    To: "Rob Shein" <shoten@starpower.net>, "'gatekeeper'" <gatekeeper@globenet.com.ph>, <focus-ids@securityfocus.com>
Date: Mon, 1 Mar 2004 12:52:58 -0800

    How can a sniffer be run in non-promiscuous mode ?

    Is that not the first criteria of being a sniffer. Running in Promisc' mode
    ?

    Thx

    Kumar.

    ----- Original Message -----
    From: "Rob Shein" <shoten@starpower.net>
    To: "'gatekeeper'" <gatekeeper@globenet.com.ph>;
    <focus-ids@securityfocus.com>
    Sent: Sunday, February 29, 2004 8:17 PM
    Subject: RE: Counter detect Network Sniffer

    > If the sniffer is running like this, they're not going to see anything
    they
    > don't participate in. It's not a sniffer if they aren't in promiscuous
    > mode.
    >
    > > -----Original Message-----
    > > From: gatekeeper [mailto:gatekeeper@globenet.com.ph]
    > > Sent: Tuesday, February 24, 2004 2:24 AM
    > > To: focus-ids@securityfocus.com
    > > Subject: Re: Counter detect Network Sniffer
    > >
    > >
    > > Hi,
    > >
    > > It may also not work if sniffer was ran non-promiscuously
    > > (i.e. snoop -P)? Is there a way to detect such sniffers? Thanks.
    > >
    > > jun g.
    > > "hiding in plain sight"
    > >
    >
    >
    > --------------------------------------------------------------------------
    -
    > Free 30-day trial: firewall with virus/spam protection, URL filtering,
    VPN,
    > wireless security
    >
    > Protect your network against hackers, viruses, spam and other risks with
    Astaro
    > Security Linux, the comprehensive security solution that combines six
    > applications in one software solution for ease of use and lower total cost
    of
    > ownership.
    >
    > Download your free trial at
    > http://www.securityfocus.com/sponsor/Astaro_focus-ids_040301
    > --------------------------------------------------------------------------
    -
    >
    >

    ---------------------------------------------------------------------------
    Free 30-day trial: firewall with virus/spam protection, URL filtering, VPN,
    wireless security

    Protect your network against hackers, viruses, spam and other risks with Astaro
    Security Linux, the comprehensive security solution that combines six
    applications in one software solution for ease of use and lower total cost of
    ownership.

    Download your free trial at
    http://www.securityfocus.com/sponsor/Astaro_focus-ids_040301
    ---------------------------------------------------------------------------

  • Next message: Sam f. Stover: "Re: Counter detect Network Sniffer"

    Relevant Pages

    • Re: Counter detect Network Sniffer
      ... Non-promiscuous or promiscuous it is still called a sniffer. ... > Security Linux, the comprehensive security solution that combines six ...
      (Focus-IDS)
    • Re: Counter detect Network Sniffer
      ... It is good enough to install a sniffer on a box and see what ... >> Protect your network against hackers, viruses, spam and other risks with ... >> Security Linux, the comprehensive security solution that combines six ...
      (Focus-IDS)
    • Re: Counter detect Network Sniffer
      ... > How can a sniffer be run in non-promiscuous mode? ... > Is that not the first criteria of being a sniffer. ... Protect your network against hackers, viruses, spam and other risks with Astaro Security Linux, the comprehensive security solution that combines six applications in one software solution for ease of use and lower total cost of ownership. ...
      (Focus-IDS)
    • Re: Counter detect Network Sniffer
      ... Tcpdump is a sniffer. ... Both can operate in promisc mode, ... Security Linux, the comprehensive security solution that combines six ...
      (Focus-IDS)
    • RE: Counter detect Network Sniffer
      ... If the sniffer is running like this, they're not going to see anything they ... firewall with virus/spam protection, URL filtering, VPN, ... Security Linux, the comprehensive security solution that combines six ...
      (Focus-IDS)