Ethereal-users: Re: [Ethereal-users] using ethereal as monitoring tool on shares.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Andrew Hood <ajhood@xxxxxxxxx>
Date: Mon, 24 Oct 2005 23:43:06 +1000
waltern@xxxxxxxxxx wrote:
> Hi,
>  
> I would like to know if it's possible to use ethereal to sniff only data
> being copied from one computer to another?
>  
> I could use this to track down computers that are busy propagating
> viruses around on the network.

You are much better off with a tool like Snort. It has all the virus
detection code already built in.

http://www.snort.org

Just make sure you get the latest version without the Back Orifice
vulnerability.

-- 
There's no point in being grown up if you can't be childish sometimes.
                -- Dr. Who