Re: Anti Packet Sniffer Software

From: Marco (tired.of.spam)
Date: 01/27/04 

Date: Tue, 27 Jan 2004 21:46:28 +0100

AFAIK Anitsniff only checks if the WinpCap driver is installed .. so, in my
opinion, is not of much use.

for what concerns local admins access there is an alternative solution that
you may want to consider: NeoExec from NeoValens. It allows you to define
which apps must run with elevated privs while users run with regular privs
.. and, this is not yet another variation of the RunAs theme. Developers can
be secured ... 

-- 
Marco [ www.neovalens.com ]
--
<anonymous@discussions.microsoft.com> wrote in message
news:356101c3e202$a2db5140$a401280a@phx.gbl...
> We are running win2k on all or workstations. Many of the
> developers and techs have local admin access to some of
> the workstations (it is necessary for their jobs). We have
> been running into problems with some employees installing
> packet sniffers (Ethereal, Sniffer Pro, Etherpeak) on
> their workstations and sniffing passwords off the LAN.
>
> Is there any kind of "anti-sniffer" software that will
> find computers running packet sniffers on a LAN? I know
> that L0pht industries used to make a product called
> Antisniff but it only runs on Windows 95/98 and Windows
> NT, not Windows 2000.
>
>
>

Relevant Pages