> It would be sort of odd for someone to go in a back room and pull out a computer, whip it up on the switch and proceed to fire up ethereal.
Actually it's much more common than you think. I have known people that found old laptops laying on top of their switch racks that had been dsniffing traffic on that segment and pushing it outside the network. It can create a really major incident. badenIT GmbH System Support Chris Meidinger Tullastrasse 70 79108 Freiburg --------------------------------------------------------------------------- ----------------------------------------------------------------------------