Re: How can I detect if there is a sniffer running on my local sobnet?

[Bennett Todd]

I seem to recall the trick was something like "send a ping or some such to the
broadcast IP address with a specific, non-broadcast ethernet address". While
it won't catch the truly stealthy sniffer with no transmit pin connected, or
even a specialty customized sniffer from the network drivers up, it _will_ get
a ping back from general-purpose OSes that have an interface in promiscuous
mode, and won't be seen by hosts whose interfaces are not in promisc.

-Bennett
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]