Security Basics mailing list archives

Re: How to stop Admins from sniffing ?


From: James Harless <jharless () kidwellcompanies com>
Date: Thu, 27 Jul 2006 15:14:00 -0500

You may want to consider your company's policies before you pursue this,
however.  It sounds like your admins have a high level of 'buy in' from your
boss(es).  What Chris outlined is certainly possible but, it can be grounds
for termination in some companies.

And..yes, it is quite detectable.


James


On 7/27/06 11:17 AM, "Chris Mavin" <chris.mavin () googlemail com> wrote:

Hey,

If I were really bothered about it I'd probably setup a proxy at home and
use a VPN connection connect to it. Then surf and do whatever you don't want
them to see like that. At home: Linux server, Squid, and OpenVPN.

Chris


-----Original Message-----
From: swap_tek () yahoo co uk [mailto:swap_tek () yahoo co uk]
Sent: Wednesday, July 26, 2006 6:14 AM
To: security-basics () securityfocus com
Subject: How to stop Admins from sniffing ?

Hey List


I work in a small organisation and the system and network administrators
here are constantly monitoring all data in the network. I have seen them
running Etherreal on their systems and from their talks i am sure that they
know who is doing what. I m using windows XP and i have a personal firewall
installed which pop's up every few minutes saying that there is a port scan
attack going on. And when i looked up that IP address it belongs to tbe
system being used by the administrator. I have tried talking to my bosses
about this but not happened ( maybe the admins convinced them that they are
not doing anything like that or its happening by bosses permisson).  i know
since they are in same network as me its easy for them to sniff all traffic
and everything.


What i want to know from you ppl is that is there is anyway way to stop this
? is it possible for me to encrypt all traffic going out from my system ?

I have never used a Anti-Sniffer but can they help ? any way out ?


Thanks in advance

Jeff


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------



---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------



---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: