Re: Caching a sniffer

[ksaenz () spinaweb com au]

If you have a decent network switch in your environment
you can disable all it's port to allow promiscuous mode
across the network.


> > How can i know if there a sniffer running in my network?
>
> On possibility is run ifconfig and see if the network interface is in 
> promiscuous mode.
>
> OTOH, there are several techniques for detecting sniffers remotely. The 
> guys from atstake.com had a program that can be used for that.
>
> Note, however, that's a heuristic detection.
>
> For the "theory" behind these programs, use Google, there are many papers 
> on this subject.
>
>
> --
> Fernando Gont
> e-mail: fernando () gont com ar || fgont () acm org
>
>
>
> ---------------------------------------------------------------------------
> Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
> any course! All of our class sizes are guaranteed to be 10 students or less 
> to facilitate one-on-one interaction with one of our expert instructors. 
> Attend a course taught by an expert instructor with years of in-the-field 
> pen testing experience in our state of the art hacking lab. Master the skills
>
> of an Ethical Hacker to better assess the security of your organization. 
> Visit us at: 
> http://www.infosecinstitute.com/courses/ethical_hacking_training.html
> ----------------------------------------------------------------------------




-------------------------------------------------
This mail sent through IMP: http://horde.org/imp/

---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------