On 26 Jul 99, at 20:24, Jan van Rensburg wrote:
> > Q1) How can one find that there is a sniffer running on a switched
> > network?
>
> there is no sure way to find this out. an easy example is just
> cutting the tx pin on a utp cable, then the sniffer will be totally
> "transparent".
Note that this technique requires that the person placing the sniffer has
physical access to the NIC (and that the machine that will run the sniffer
doesn't need R/W network access on that NIC. A machine meeting these
criteria might show up on a physical inspection....
David G
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
