On 26 Jul 99, at 11:40, [EMAIL PROTECTED] wrote:
> Q1) How can one find that there is a sniffer running on a switched
> network?
L0pht have just released a tool which claims to locate sniffers, at least
partly by their response to broadcast messages. It may be possible to
configure this to do a pretty good job on your network.
Sniffing a switched network is of limited point, unless one can actually
compromise the switch configuration (e.g., set up a "span" port so that the
sniffer sees more than just one segment's traffic). So that's where I think
I'd focus my efforts.
David G
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
