sniffers detection tools

[Penguin]

is there an open source sniffers detection tools?

[MrLinus]

Lots of them. The following 3 sniffers are the most well known:

TCPDump

Ethereal

Ettercap

For IDS (detection) probably the most well-known is

SNORT

Prelude-IDS is a newer, hybrid IDS.

[Kite]

i have Ethereal, it is a very easy program to use after setting it up.

[Penguin]

Originally posted here by MsMittens
Lots of them. The following 3 sniffers are the most well known:

TCPDump

Ethereal

Ettercap

For IDS (detection) probably the most well-known is

SNORT

Prelude-IDS is a newer, hybrid IDS.

i wanna detect someone is sniffing my network..
is there such tools?

[MrLinus]

Hrmm.. depends on how the person is sniffing. If they are doing active sniffing (involving arp poisoning) they'll be easy enough to see using simple packet sniffers I've identified above. If they are passively sniffing that can be harder but is possible to a degree. This PDF WhitePaper on Promiscuous NIC Detection can help.

Tools like ArpMonitor, AntiSniff (no longer in production?) and a few others would be what you're looking for. Take a gander at SecurityFocus' Sniffer section

[DjM]

Have a look at AntiSniff , I never used it, but it kind of looks like what your asking for.

Cheers:


/edit
Sorry MsM, I thought AntiSniff was still available.....

[MrLinus]

Ever since l0pht went to @Stake a lot of their former good tools went "bye-bye".