On Tue, 17 Aug 1999, peter pajak wrote:
> hi jeff,
>
> i don't think you can snoop/sniff the stuff on the cable segment using no
> protocol bound to the nic, although you can put that nic in promiscuous mode
> without one.
Actually you can, but it requires a layer2/layer3 shim in order to copy
frames up to the listening app. This allows you to process the traffic
with no layer 3 or above component. Its exacly how RealSecure implements
it.
Of course Jeff never mentioned which app he's using. ;)
Cheers,
Chris
--
**************************************
[EMAIL PROTECTED]
* Multiprotocol Network Design & Troubleshooting
http://www.amazon.com/exec/obidos/ASIN/0782120822/geekspeaknet
* Mastering Network Security
http://www.amazon.com/exec/obidos/ASIN/0782123430/geekspeaknet
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
