Re: Counter detect Network Sniffer

["Vel" <vel () sympatico ca>]

How can a sniffer be run in non-promiscuous mode ?

Is that not the first criteria of being a sniffer. Running in Promisc' mode
?

Thx

Kumar.

----- Original Message -----
From: "Rob Shein" <shoten () starpower net>
To: "'gatekeeper'" <gatekeeper () globenet com ph>;
<focus-ids () securityfocus com>
Sent: Sunday, February 29, 2004 8:17 PM
Subject: RE: Counter detect Network Sniffer


> If the sniffer is running like this, they're not going to see anything
they
> don't participate in.  It's not a sniffer if they aren't in promiscuous
> mode.
>
> > -----Original Message-----
> > From: gatekeeper [mailto:gatekeeper () globenet com ph]
> > Sent: Tuesday, February 24, 2004 2:24 AM
> > To: focus-ids () securityfocus com
> > Subject: Re: Counter detect Network Sniffer
> >
> >
> > Hi,
> >
> > It may also not work if sniffer was ran non-promiscuously
> > (i.e. snoop -P)? Is there a way to detect such sniffers? Thanks.
> >
> > jun g.
> > "hiding in plain sight"
>
>
> --------------------------------------------------------------------------
-
> Free 30-day trial: firewall with virus/spam protection, URL filtering,
VPN,
> wireless security
>
> Protect your network against hackers, viruses, spam and other risks with
Astaro
> Security Linux, the comprehensive security solution that combines six
> applications in one software solution for ease of use and lower total cost
of
> ownership.
>
> Download your free trial at
> http://www.securityfocus.com/sponsor/Astaro_focus-ids_040301
> --------------------------------------------------------------------------
-
>


---------------------------------------------------------------------------
Free 30-day trial: firewall with virus/spam protection, URL filtering, VPN,
wireless security

Protect your network against hackers, viruses, spam and other risks with Astaro
Security Linux, the comprehensive security solution that combines six
applications in one software solution for ease of use and lower total cost of
ownership.

Download your free trial at 
http://www.securityfocus.com/sponsor/Astaro_focus-ids_040301
---------------------------------------------------------------------------