RE: Scan for "outsider" Pcs on network

["Lim Ming Wei" <mwlim () pacific net sg>]

I come across a program call air-snare that is able to detect that.  But you
will need to have a list of all your systems mac address.  It is like an IDS
program.  I believe that most of the IDS program is able to do that.


-----Original Message-----
From: dhamm () jackofallgames com [mailto:dhamm () jackofallgames com] 
Sent: Friday, March 03, 2006 7:48 AM
To: focus-ids () securityfocus com
Subject: Scan for "outsider" Pcs on network

Is there a way to setup a scan and be notified of an intruding pc that is
physically plugged into the network? When you have an enviroment with a
large amount of network jacks, it's hard to make sure the ones no longer in
use are turned off, and that no "visitors" have sat down to use your network
connections, esp. if you have a large amount of contractors in and out. It
got me to searching the net, and so far I have found one cemmercial product
that can do it, but nothing else. Any suggestions?

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
------------------------------------------------------------------------



------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------