Results 1 to 5 of 5

Thread: detect IP sniffing

  1. March 11th, 2005, 03:57 AM #1
    Mbman
    Mbman is offline
    Junior Member
    Join Date
    Apr 2004
    Posts
    7

    detect IP sniffing

    Is it possible to determine if someone is sniffing traffic on our server?

    If so, what is the best way to go about this?

    thanks
    Reply With Quote Reply With Quote
  2. March 11th, 2005, 04:23 AM #2
    phishphreek
    phishphreek is offline
    AO übergeek phishphreek's Avatar
    Join Date
    Jan 2002
    Posts
    4,325
    Sure, there are a couple of different ways and tools out there.

    You didn't give any specific info on your network (cables, hubs, managed/unmanaged switches, routers, workstation OSs, server OSs, etc.)

    Is there any reason you think that someone is sniffing your traffic?
    If so, why?

    In the mean time... read up some of the following links from google.

    http://www.google.com/search?hl=en&r...scuous&spell=1
    Quitmzilla is a firefox extension that gives you stats on how long you have quit smoking, how much money you\'ve saved, how much you haven\'t smoked and recent milestones. Very helpful for people who quit smoking and used to smoke at their computers... Helps out with the urges.
    Reply With Quote Reply With Quote
  3. March 11th, 2005, 08:16 PM #3
    rowdy_yates
    rowdy_yates is offline
    Senior Member
    Join Date
    Dec 2004
    Posts
    137
    Hi. You might be interested in this tool if you are managing a Windows network.

    PromqryUI 1.0

    MCNGP Thug # 39
    :: The MCNGP :: We are building a better world for all of I.T.
    --
    Try BSDLive - Business card CD version
    Reply With Quote Reply With Quote
  4. March 11th, 2005, 08:23 PM #4
    Irongeek
    Irongeek is offline
    King Tutorial-ankhamun
    Join Date
    Jul 2004
    Posts
    897
    Here are two more:

    Sentinel
    http://www.packetfactory.net/Projects/sentinel/

    Sniffdet
    http://sniffdet.sourceforge.net/
    http://www.irongeek.com
    Reply With Quote Reply With Quote
  6. March 12th, 2005, 03:47 AM #5
    Mbman
    Mbman is offline
    Junior Member
    Join Date
    Apr 2004
    Posts
    7
    Thanks for the information everyone. The server is a Linux/Apache setup. I am not sure about the routers and hubs. It is a dedicated server but it is hosted.

    We don't necessarily have any evidence that someone may be sniffing traffic. We would just like to take a proactive approach--just in case.

    Thanks
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules