Re: IDS: detecting a sniffer remotely

Trevor Schroeder (tschroedacm.org)
Fri, 24 Sep 1999 20:12:49 -0500 (CDT)

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
• Next message: knarphie: "Re: IDS: X-Term ports"
• Previous message: Robert Graham: "Re: IDS: X-Term ports"
• Maybe in reply to: Tim Knox: "IDS: X-Term ports"
• Next in thread: Peng Ning: "RE: IDS: detecting a sniffer remotely"
• Reply: Peng Ning: "RE: IDS: detecting a sniffer remotely"

FAQ: See http://www.ticm.com/kb/faq/idsfaq.html
IDS: See http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
HELP: Having problems... email questions to ids-owneruow.edu.au
NOTE: Remove this section from reply msgs otherwise the msg will bounce.
SPAM: DO NOT send unsolicted mail to this list.
USUBSCRIBE: email "unsubscribe ids" to majordomouow.edu.au
---------------------------------------------------------------------------

---
On Fri, 24 Sep 1999, laurent van-cauwelaert wrote:
> Does anyone knows if it's possible to detect remotely a sniffing host
> (specially whithout knowing its IP or MAC address.
The L0pht's Antisniff will do this.  There are others, but I believe
Antisniff has the most complete test coverage.
..........................................................................
: "I knew it was going to cost me my head and also my swivel chair, but  :
: I thought: What the hell--better men than I have risked their heads    :
: and their swivel chairs for truth and justice." -- James P. Cannon     :
:........... http://www.zweknu.org/ for PGP key and more ................:

• Next message: knarphie: "Re: IDS: X-Term ports"
• Previous message: Robert Graham: "Re: IDS: X-Term ports"
• Maybe in reply to: Tim Knox: "IDS: X-Term ports"
• Next in thread: Peng Ning: "RE: IDS: detecting a sniffer remotely"
• Reply: Peng Ning: "RE: IDS: detecting a sniffer remotely"

This archive was generated by hypermail 2.0b3 on Sat Sep 25 1999 - 09:44:01 CDT