Title: RE: [Ethereal-users] How to block Ethereal from monitoring my LANtraffic
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Give these a try: (I have never used them myself, but worth a shot.)
http://ntsecurity.nu/toolbox/promiscdetect/
http://www.securityfocus.com/tools/1039
Got spare cash?
http://www.securityfriday.com/products/promiscan.html
Or at one time L0pht had a product called "antisniff", but I am sure it cost $$$$ now that they bedded up with @Stake.
Lock down the permissions to make it difficult for them... I would also sneak in a software audit on them.
Cheers!
mb
- -----Original Message-----
From: Keith W. Hare [mailto:Keith@xxxxxxx]
Sent: Tuesday, June 15, 2004 10:42 AM
To: sim@xxxxxxxxxxx; Ethereal user support
Subject: RE: [Ethereal-users] How to block Ethereal from monitoring my LANtraffic
There is really no way (that I know of) to detect if a device is listening to the network in promiscuous mode.
If users have sufficient control of their machines to set the network port to promiscuous mode, then:
If they are connected to the network using hubs, there is no way to stop them
from listening to traffic.
If they are connected to the network using switches, and they do not have the capability
of setting the switch to pass all traffic to their switch port, they will only be able
to capture their own network traffic.
Keith Hare
- -----Original Message-----
From: Sim Kok Eng [mailto:smsb7@xxxxxxxxxxxx]
Sent: Monday, June 14, 2004 9:09 PM
To: ethereal-users@xxxxxxxxxxxx
Subject: [Ethereal-users] How to block Ethereal from monitoring my LANtraffic
Hello, ethereal-users,
If I have suspected that someone in my LAN has installed Ethereal on
his/her PC. How do I block Ethereal from monitoring my LAN traffic?
Thank you.
Best regards.
Sim Kok Eng
sim@xxxxxxxxxxx
2004-06-15
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (MingW32) - WinPT 0.7.96
iD8DBQFAzxx63l8yW0nRcfMRAs8+AKCXl3T2AUkpmb2wdrIlX4y0j1tUagCg1bsP
Qvil3UZwGnfMouKwFdcptIs=
=fp9E
-----END PGP SIGNATURE-----