ossec can detect an interface entering promiscuous mode, so yes, it can detect a sniffer running on a host which has an ossec agent installed.
On Thu, Apr 15, 2010 at 6:06 AM, Saeid Ansaripour <[email protected]>wrote: > Deos any body know if ossec can detect sniffers? > > > -- > To unsubscribe, reply using "remove me" as the subject. >
