RE: Counter detect Network Sniffer

["Rob Shein" <shoten () starpower net>]

If the sniffer is running like this, they're not going to see anything they
don't participate in.  It's not a sniffer if they aren't in promiscuous
mode.

> -----Original Message-----
> From: gatekeeper [mailto:gatekeeper () globenet com ph] 
> Sent: Tuesday, February 24, 2004 2:24 AM
> To: focus-ids () securityfocus com
> Subject: Re: Counter detect Network Sniffer
>
>
> Hi,
>
> It may also not work if sniffer was ran non-promiscuously  
> (i.e. snoop -P)? Is there a way to detect such sniffers? Thanks.
>
> jun g.
> "hiding in plain sight"


---------------------------------------------------------------------------
Free 30-day trial: firewall with virus/spam protection, URL filtering, VPN,
wireless security

Protect your network against hackers, viruses, spam and other risks with Astaro
Security Linux, the comprehensive security solution that combines six
applications in one software solution for ease of use and lower total cost of
ownership.

Download your free trial at 
http://www.securityfocus.com/sponsor/Astaro_focus-ids_040301
---------------------------------------------------------------------------