is there an open source sniffers detection tools?
Printable View
is there an open source sniffers detection tools?
Lots of them. The following 3 sniffers are the most well known:
TCPDump
Ethereal
Ettercap
For IDS (detection) probably the most well-known is
SNORT
Prelude-IDS is a newer, hybrid IDS.
i have Ethereal, it is a very easy program to use after setting it up.
Hrmm.. depends on how the person is sniffing. If they are doing active sniffing (involving arp poisoning) they'll be easy enough to see using simple packet sniffers I've identified above. If they are passively sniffing that can be harder but is possible to a degree. This PDF WhitePaper on Promiscuous NIC Detection can help.
Tools like ArpMonitor, AntiSniff (no longer in production?) and a few others would be what you're looking for. Take a gander at SecurityFocus' Sniffer section
Have a look at AntiSniff , I never used it, but it kind of looks like what your asking for.
Cheers:
/edit
Sorry MsM, I thought AntiSniff was still available.....
Ever since l0pht went to @Stake a lot of their former good tools went "bye-bye". :(