RE: How can I detect if there is a sniffer running on my local sobnet?

[Rabid Wombat]

On Thu, 14 Jan 1999, Cohen Liota wrote:

> I think Mr. Dooley was referring to neped.c from apostols.org.  
> It sends a hacked arp, the card in promiscuous mode replies back.
> Although this is not a sure fire method for detecting someone 
> sniffing, it is clever! 
> 

Clever, but I think it only works with other LINUX boxes, and only if 
they are running an unpatched stack, although I could be wrong.

Not really a solution for finding a sniffer on your network. A "good" 
sniffer is passive, and technically, it would not even need to be 
physically attached to the cable plant.

-r.w.
 
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]