Educause Security Discussion mailing list archives

Re: consequences for student hacking


From: Bill Brinkley <wbbrinkley () GMAIL COM>
Date: Wed, 20 Feb 2008 07:52:05 -0500

A passive sniffer (Packet Capture) is simply capturing the data that comes
to the port or is transmitted in the air, and not should not be limited. Any
device that can legitimately connect to the network should be able to
capture any traffic destined for it. Actively scanning or manipulating the
network to receive more traffic than would normally occur may be a criminal
act, but the passive sniffing is not.

--
Bill Brinkley
Cell 678.877.5145
wbbrinkley () gmail com


On Feb 19, 2008 4:38 PM, Bob Henry <bhenry () boisestate edu> wrote:

Boise State has a policy restricting the use of network scanners, host
scanners, sniffers, etc. to those approved by the Network Engineer.  The
consequences for violating the policy are described with these words:

Depending on the seriousness of an offense, violation of this policy
can result in penalties ranging from reprimand, to loss of use, to
referral to University authorities for disciplinary action, to criminal
prosecution.

That's the theory.  I'm looking for a reality check.  What do your
institutions do when you catch a student sniffing the wired or wireless
network for userID's and passwords?

Thanks,


<wbbrinkley () gmail com>

Current thread: