atom feed200 messages in org.freebsd.freebsd-securityRe: Detecting sniffers (was: Re: secu...
FromSent OnAttachments
Vincent PoyJul 28, 1997 3:19 am 
Nicole H.Jul 28, 1997 3:22 am 
Vincent PoyJul 28, 1997 4:39 am 
Robert WatsonJul 28, 1997 5:36 am 
Nicole H.Jul 28, 1997 5:40 am 
Eric FeillantJul 28, 1997 5:41 am 
David HollandJul 28, 1997 6:12 am 
Nicole H.Jul 28, 1997 6:15 am 
Jonathan A. ZdziarskiJul 28, 1997 6:22 am 
Tomasz DudziakJul 28, 1997 6:29 am 
Adam ShostackJul 28, 1997 6:39 am 
Guido van RooijJul 28, 1997 6:52 am 
Garrett WollmanJul 28, 1997 7:04 am 
Robert WatsonJul 28, 1997 7:56 am 
Robert WatsonJul 28, 1997 7:59 am 
Ollivier RobertJul 28, 1997 8:16 am 
Robert WatsonJul 28, 1997 8:48 am 
Jonathan A. ZdziarskiJul 28, 1997 8:50 am 
Jonathan A. ZdziarskiJul 28, 1997 8:54 am 
Rodney W. GrimesJul 28, 1997 8:55 am 
Adam ShostackJul 28, 1997 9:04 am 
Robert WatsonJul 28, 1997 10:08 am 
Rodney W. GrimesJul 28, 1997 10:26 am 
Vincent PoyJul 28, 1997 10:59 am 
Vincent PoyJul 28, 1997 11:23 am 
Vincent PoyJul 28, 1997 11:27 am 
David LangfordJul 28, 1997 11:30 am 
Vincent PoyJul 28, 1997 11:31 am 
Robert WatsonJul 28, 1997 11:33 am 
Robert WatsonJul 28, 1997 11:44 am 
Jonathan A. ZdziarskiJul 28, 1997 11:46 am 
Jonathan A. ZdziarskiJul 28, 1997 11:48 am 
Jonathan A. ZdziarskiJul 28, 1997 11:49 am 
Vincent PoyJul 28, 1997 12:29 pm 
Robert WatsonJul 28, 1997 12:29 pm 
Vincent PoyJul 28, 1997 12:38 pm 
Vincent PoyJul 28, 1997 12:48 pm 
Vincent PoyJul 28, 1997 12:54 pm 
Vincent PoyJul 28, 1997 12:56 pm 
Adam ShostackJul 28, 1997 1:04 pm 
Jonathan A. ZdziarskiJul 28, 1997 1:15 pm 
Jonathan A. ZdziarskiJul 28, 1997 1:16 pm 
Robert WatsonJul 28, 1997 1:45 pm 
Jonathan A. ZdziarskiJul 28, 1997 1:47 pm 
Jonathan A. ZdziarskiJul 28, 1997 1:51 pm 
Robert WatsonJul 28, 1997 1:54 pm 
Nate WilliamsJul 28, 1997 2:00 pm 
Ollivier RobertJul 28, 1997 2:07 pm 
Matthew N. DoddJul 28, 1997 2:14 pm 
Karl DenningerJul 28, 1997 2:42 pm 
Vincent PoyJul 28, 1997 2:43 pm 
Vincent PoyJul 28, 1997 3:01 pm 
Vincent PoyJul 28, 1997 3:06 pm 
Jordan K. HubbardJul 28, 1997 3:10 pm 
Vincent PoyJul 28, 1997 3:25 pm 
145 later messages
Subject:Re: Detecting sniffers (was: Re: security hole in FreeBSD)
From:Nicole H. (nic@mediacity.com)
Date:Jul 28, 1997 5:40:26 am
List:org.freebsd.freebsd-security

On Mon, 28 Jul 1997, Nicole H. wrote:

Does anyone know of a good way to detect people "sniffing" on the network? IE a
program that will detect a machine running in promiscuous mode?

I was wondering the same thing when I read a clause prohibiting the use of network cards in promiscuous mode in the CMU network use policy. I asked some computer security people I knew about this and their response was that it is not possible to detect if a network card is in promiscious mode unless you have access to the machine it's in - i.e., that you can look at ifconfig on that machine.

<STUPID QUESTION>

What is the range of sniffing? I.E. can the "sniffer" sniff past switched
networks? What is the "range" of sniffing?

</STUPID QUESTION>

Thanks

Nicole

nic@mediacity.com |\ __ /| (`\ http://www.mediacity.com Nicole Harrington | o_o |__ ) ) Phone: 415-237-1464 // \\ Pager: 415-301-2482 Systems Administrator ------------------------(((---(((------------------------------------- ******* * ***** What do you mean Spelling Errors? * * * My Modem is Error Correcting! *

CAUTION: I'm no doctor, I only tell computers what to do. Nothing in this document should be construed as medical advice. My opinions are subject to the availability of information. I learn new things each day, and so may change my opinions.

Courtesy is owed. Respect is earned. Love is given. --