Re: Newsnight Crypto Bazaar

[John David Galt]

Quoth Dave Emery:
>       Could the packet accounting you do detect covert or overt
>modifications to your switches or switch configuration that caused them
>to copy packet streams sent between two ports to a third port as well ?
>Do you check gross flows to convince yourself that for every packet going
>in only one comes out ?

Why would an eavesdropper need to modify the network configuration?  I would
just hook up a sniffer and set it to promiscuous mode.

John David Galt