Ethereal-users: Re: [Ethereal-users] How to block Ethereal from monitoring myLANtraffic

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "Gisle Vanem" <giva@xxxxxxxxx>
Date: Tue, 15 Jun 2004 18:16:57 +0200
"Keith W. Hare" <Keith@xxxxxxx> said:

> There is really no way (that I know of) to detect if a device is
> listening to the network in promiscuous mode.

There is on way described here:
http://www.securityfriday.com/promiscuous_detection_01.pdf

But that method doesn't work for passive sniffers or if running
on OS'es that checks the ARP requests properly.

The paper will also probably give you an idea of how to do an
"anti-anti-sniffer" also :)

--gv