RE: How can I detect someone sniffing my network?

From: bobh@newsguy.com
Date: 01/12/02 

From: bobh@newsguy.com
To: "Mario Camara" <mario@node1.com.br>, <security-basics@securityfocus.com>
Date: Fri, 11 Jan 2002 19:39:50 -0600

check out this site. this guy has lots of info on sniffers, and detection.

http://www.robertgraham.com/pubs/sniffing-faq.html

to detect commercial sniffers you can send traffic to a "known" non existent
ip address, and most commercial sniffers (snoffer pro, ether peek, etc) will
attempt to resolve that address. watch for requests to your DNS for that
address.

forgive me if this was posted wrong, it's my first post to the list.

Bob

-----Original Message-----
From: Mario Camara [mailto:mario@node1.com.br]
Sent: Tuesday, January 08, 2002 8:13 PM
To: security-basics@securityfocus.com
Subject: How can I detect someone sniffing my network?
Importance: High

Can someone help me with that?

 

Mário Câmara
mario@globonet.com.br
mario@node1.com.br
ICQ: 331 335

Quantcast