Re: [PEN-TEST] snoop ona live telnet session?

[Jan Muenther <jan () RADIO HUNDERT6 DE>]

> Does anyone know of a tool that will allow me to snoop on a live telnet
> session?  I'd like to be able to run this on a firewall to see sessions as
> they pass through.  Sort of like what ethereal does with "follow TCP
> Stream", but live.

Absolutely. Snort (www.snort.org) can do this. Check Lance
Spitzner's papers from the Honeynet project
(http://www.enteract.com/~lspitz/papers.html) on what to do with
it and how (and check the snort docu for details).

Cheers, Jan
--
Radio HUNDERT,6 Medien GmbH Berlin
- EDV -
j.muenther () radio hundert6 de