RE: how to bypass rogue machine detection techniques

["Marek Isalski" <Marek.Isalski () smuht nwest nhs uk>]

> If you just implement
> 802.1x or as you first mentioned, some kind of port scanning, then
> you would never be able to detect a person with a =93receive=94 only
> cable connected to you switch.

Surely this isn't a problem on a switched network (unless your
broadcast traffic is sensitive)?  There might be a few packets of
interest that you do see, but only while the switches learn MAC
addresses.

Marek

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/