Re: Network Analysis tool

["James Fields" <jvfields () tds net>]

Quite a few actually.  Firewall logs are a good place to start.  Sniffers
are also good.  You will need elevated access to the network to use one in
most cases.

----- Original Message -----
From: "Alaa Shaheen" <Ashaheen () aedegypt org>
To: <security-basics () securityfocus com>
Sent: Wednesday, August 27, 2003 6:28 AM
Subject: Network Analysis tool


> Hi All
>
> Is there is a tool that can scan the network traffic and tell me if
> there is any P2P, MSN, ICQ and other IM traffic in the network and who
> is originating it ?
>
> Thank you
>
> Alaa Shaheen
>
>
> --------------------------------------------------------------------------
-
> Attend Black Hat Briefings & Training Federal, September 29-30 (Training),
> October 1-2 (Briefings) in Tysons Corner, VA; the world's premier
> technical IT security event.  Modeled after the famous Black Hat event in
> Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.
> Symantec is the Diamond sponsor.  Early-bird registration ends September
6.Visit us: www.blackhat.com
> --------------------------------------------------------------------------
--
>



---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), 
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier 
technical IT security event.  Modeled after the famous Black Hat event in 
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
Symantec is the Diamond sponsor.  Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------