IDS mailing list archives

答复: Counter detect Network Sniffer


From: Peng Xuena <pengxn () neusoft com>
Date: Tue, 24 Feb 2004 12:45:05 +0800

it seems that proDetect doesn't work well in detecting network cards in promiscuous mode.
I tried this tool in my network. Thought several hosts in this network is in promiscuous mode, only 
the gateway is reported to be in promiscuous mode.

' Hi Bill,

'You need to find a tool that can scan your network for network cards in
'promiscuous mode (also called "Sniffer Mode"). An open source tool
'(PROdetect) is available at http://www.cmpe.boun.edu.tr/~tas/ 

'Kind Regards
'Michael Poulsen, CISSP

-----Original Message-----
From: Bill Mok [mailto:billmok2002 () yahoo com hk] 
Sent: 19 February 2004 04:50
To: focus-ids () securityfocus com
Subject: Counter detect Network Sniffer

Is there any method to detect one using sniffer, say ethereal, in the same
network?


_________________________________________________________
必�⒓肌���歌、小星星...
浪漫����  情心�B�M
http://us.rd.yahoo.com/evt=22281/*http://ringtone.yahoo.com.hk/

---------------------------------------------------------------------------
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.

Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.

Download 30-day evaluation at:
http://www.securityfocus.com/sponsor/Astaro_focus-ids_040219
---------------------------------------------------------------------------






---------------------------------------------------------------------------
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

Protect your network with the comprehensive security solution that integrates 
six applications for ease of use and lower TCO.

Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.

Download 30-day evaluation at:
http://www.securityfocus.com/sponsor/Astaro_focus-ids_040219
---------------------------------------------------------------------------


Current thread: