Antisniff should help you find out which node is sniffing. A fix for this (assuming a fairly small network) is to use a switch and assign static ARP cache entries on each node. Ths switch will prevent promiscuous mode sniffing and the static ARP entries will prevent ARP cache poisoning, which is used to sniff data on a switched network. Additionally, you should employ encryption mechanisms whenever possible.
-Brien -- ______________________________________________ http://www.linuxmail.org/ Now with POP3/IMAP access for only US$19.95/yr Powered by Outblaze
