Re: Anti Packet Sniffer Software
From: Ron Lowe (ron-msng_at_{d.e.l.e.t.e.}lowe-family.me.uk)
Date: 01/28/04
- Previous message: Agustin Chernitsky: "Help me stop the hacker..."
- In reply to: Robert Moir: "Re: Anti Packet Sniffer Software"
- Next in thread: Skorpion (CET): "Re: Anti Packet Sniffer Software"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 27 Jan 2004 23:29:21 -0000
> > Is there any kind of "anti-sniffer" software that will
> > find computers running packet sniffers on a LAN?
>
> Nothing that I'd want to bet my secure passwords on, no. You can do things
> like use another packet sniffer to detect NICs that are in "promiscuous"
> mode, which is a fair sign, but this isn't 100% reliable.
>
Indeed.
( Agree 100% this is a people problem, not a technology problem. )
My diagnostic sniffing kit is an old laptop with ethereal on it,
and an old hub.
I use the hub to patch in to the segment-under-test, and
provide a drop to the laptop.
Now, to prevent the sniffing laptop from interfering in any way
with the network under test, I have a special patch cable between
the laptop and the hub.
It does not have the TX pair connected. Only the RX pair.
It can never originate anything.
It can never reply to anything.
Now, *that's* stealth.
No software can ever detect that machine.
-- Best Regards, Ron Lowe MS-MVP Windows Networking
- Previous message: Agustin Chernitsky: "Help me stop the hacker..."
- In reply to: Robert Moir: "Re: Anti Packet Sniffer Software"
- Next in thread: Skorpion (CET): "Re: Anti Packet Sniffer Software"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
