what if the computer that does the sniffing is not part of my ossec agents, other words what happens if sombody trys to snif my network.
On Wed, Apr 14, 2010 at 8:29 PM, dan (ddp) <[email protected]> wrote: > It can tell when an agent's interface goes into promisc mode. But if > the machine isn't an agent, it won't be able to tell. > > On Wed, Apr 14, 2010 at 4:06 PM, Saeid Ansaripour <[email protected]> > wrote: > > Deos any body know if ossec can detect sniffers? > > > > > > -- > > To unsubscribe, reply using "remove me" as the subject. > > >
