Detecting Network Sniffers ???

[Jonny Boy <jonny () de21comp net>]

Hello!

Can somebody guide me on detecting a sniffer on my network. can i still 
detect a sniffer even if the computer running the sniffer has disabled the 
TCP/IP stack or decompiled it altogether from the kernel. can i somehow go 
onto the datalink layer and use 802.3 protocol to test for the presence of 
the sniffer.

Thankyou.

Jonny


---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------