It is, however, if ports are mapped just the presence of activity on them can generate alarms.
If you have a SIEM on the system it's not hard to see this if you have alarms properly set up. Dan Sent from my iPad > On Jul 18, 2014, at 2:01 PM, Craig via Mercedes <mercedes@okiebenz.com> wrote: > > On Fri, 18 Jul 2014 10:15:06 -0700 Curt Raymond via Mercedes > <mercedes@okiebenz.com> wrote: > >> I installed said sniffer, plugged it into the corporate network in one >> of the classrooms, sniffed around a little but didn't see anything >> exciting so put the laptop back in my office (the video editing suite >> really) and hung around talking with some friends in the classroom. >> About 15 minutes go by and a guy from corporate IT shows up counting >> ports. He wouldn't say what he was up to but I had a pretty good idea. > > I thought that packet sniffing was a passive activity. How could he tell > you were sniffing? > > > Craig > > _______________________________________ > http://www.okiebenz.com > > To search list archives http://www.okiebenz.com/archive/ > > To Unsubscribe or change delivery options go to: > http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com > > All posts are the result of individual contributors and as such, those > individuals are responsible for the content of the post. The list owner has > no control over the content of the messages of each contributor. _______________________________________ http://www.okiebenz.com To search list archives http://www.okiebenz.com/archive/ To Unsubscribe or change delivery options go to: http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com All posts are the result of individual contributors and as such, those individuals are responsible for the content of the post. The list owner has no control over the content of the messages of each contributor.
