RE: Monitoring tool

["Timmothy Lester" <Timmothy.Lester () primeadvisors com>]

This probably wasn't the best solution, but it was a quick idea that
popped into my head, because I thought he just wanted to view the all
sessions from users logged in on the same subnet.  You can use Ettercap
as a sniffer to see what sessions are active from what hosts on the.  I
can't remember off the top of my head how to do this from BASH, but from
the GUI, you can just scan for hosts; then add the ones you want to the
target from the host list, and view connections and organize the
information accordingly. And yes, you have a few MITM options too.

I revoke that suggestion...

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Rob Michel
Sent: Thursday, January 24, 2008 7:33 PM
To: security-basics () securityfocus com
Subject: RE: Monitoring tool

I know ettercap to do arp poisoning for MTM attacks and to sort through
that
capture for usernames and passwords, but how would ettercap accomplish
what
Jason is asking ? - I'm not trying to be sarcastic, I just don't
understand
how to use ettercap in this manner. 

Thanks! 


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On
Behalf Of Timmothy Lester
Sent: Thursday, January 24, 2008 12:57 PM
To: Jason Bridge; security-basics () securityfocus com
Subject: RE: Monitoring tool

Ettercap is a good tool that you can use.  Are all of your servers on
the same subnet?

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Jason Bridge
Sent: Thursday, January 24, 2008 11:41 AM
To: security-basics () securityfocus com
Subject: Monitoring tool

Hello all,  I have a quick question and hope that there is a silver
spoon out there ready to be used.

Situation is this:  I have many many servers that I would like to
monitory the current users logged in.  Other than writing a script
that runs around logging into all these hosts and running a command I
would like to have a dashboard type view of all the current user
sessions on any given host.  Does anyone know of a monitoring tool
that will give me this type of information?

MTIA
J