I think Mr. Dooley was referring to neped.c from apostols.org.
It sends a hacked arp, the card in promiscuous mode replies back.
Although this is not a sure fire method for detecting someone
sniffing, it is clever!
Cheers,
Cohen
At 11:18 PM 1/13/99 -0500, Rabid Wombat wrote:
>AFAIK, the program you are talking about looks for NICs in promiscuous
>mode **on the system that is running the program**.
>
>Maybe there's a quantum physics based application I don't know about.
>Please provide a reference.
>
>-r.w.
>
>On Tue, 12 Jan 1999, Carric Dooley wrote:
>
>> I have seen a program for Linux that is supposed to go out and look for
>> NIC's in promiscuous mode.
>>
>> -----Original Message-----
>> From: [EMAIL PROTECTED]
>> [mailto:[EMAIL PROTECTED]]On Behalf Of GANG WANG
>> Sent: Tuesday, January 12, 1999 1:30 PM
>> To: [EMAIL PROTECTED]
>> Subject: How can I detect if there is a sniffer running on my local
>> sobnet?
>>
>>
>> That bothers me for a long time.
>> Thanks.
>>
>> -
--
Cohen Liota
Information Security Specialist +1.416.815.3041 - v
Secure Computing Corporation +1.416.815.3001 - f
[EMAIL PROTECTED] http://www.securecomputing.com/
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
