AntiSniff program... is there any Better?

[jojojojojoj]

I try AntiSniff v1.02.1 under Windows 2000 to catch who steal my passwords on LAN but when I start scan my PC rebooted.
Then I start program under XP and it told that it can’t find network card or something I don’t remember...
Is there anyone for whom this program works? Or is there any analog programs to catch who’s sniffing packets?

[Soda_Popinsky]

You might need winpcap installed, but I thought it wasn't reasonably possible to find a sniffer on a network.

[jojojojojoj]

Where can i find it i try google but it show so many different results so i dont know... this prog have homepage?

I try this one http://winpcap.polito.it/default.htm but dunno what it do, anyway it reboots after i run antisniff.

[Fatphantom]

you can get the winpcap driver here-

http://winpcap.polito.it/

[jojojojojoj]

But what it do i dont understand anything from site.

[catch]

Passive monitoring, be it a network sniffer, wiretap, tempest monitoring, microwave side-lobe, etc tend to be infeasible to detect.

As a rule the only way to detect is to verify all the weak points secure (every network node, every inch of cable and perhaps the area around the cables, everything that might be emiting anything useful, checking all the potential side-lobe access hot spots to ensure they are monitoring equipment free)

With all areas of security, assume a compromise and limit its effects. (application isolation, personel seperation of duties, or in this case encrypt the data in such a manner to render a monitor useless) Other anti-monitoring techniques are fundementally flawed and shouldn't have resources wasted on them. (same for all security models that attempt to prevent the inevitable rather than contain it)

catch

[jojojojojoj]

Well i am not expert so i dont know stuff you told me.
And i am most denfenetly will not search every inch of cable.

[catch]

*sigh*

I really need to make a better point of paying attention to which forum threads on the front page are in.

jo... you cannot reliably (read "cost effectively") prevent or detect the monitoring of data in transit, so don't worry about it.

catch

[MrLinus]

you cannot reliably (read "cost effectively") prevent or detect the monitoring of data in transit, so don't worry about it.

How would you define "cost effectively"? Couldn't encryption be used to "prevent" monitoring of data in transit (say through SSH Tunnelling or other methods like VPNs)?

[catch]

Encryption does not prevent or detect monitoring, it merely presents the monitor with (in theory) unusable data. This may seem nitpicky, but I did mention encryption in my first post as a better answer to his situation.

catch