Hping2, packet crafting question...

This is a long shot...

I have a situation where a user at a client is bypassing a proxy, changing his local routing table and internet browsing through a local modem, connected to a fax machine. Is there any way to to craft a packet to verify this is happening - stimulus/response type action? I've spoofed packets to see if he has his machine set up to auto-dial the modem when it sees traffic destined for a non-local subnet...

Obviously we don't want the user to know what we're doing...

Any stealthy ideas?

-->j

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Swap Out your SPI or Watchfire app sec solution for
Cenzic's robust, accurate risk assessment and management
solution FREE - limited Time Offer

http://www.cenzic.com/c/wf-spi
------------------------------------------------------------------------

Relevant Pages