Bugtraq mailing list archives
Re[2]: sniffers
From: rnayfield () mail iconnet com (Nayfield, Rod)
Date: Sun, 30 Apr 95 14:52:35 EST
Right. There is no way. one of smb's papers (and the book) mention using a sniffer with transmit leads cut. The best protection would be to use switches instead of hubs... even a multi-port bridge for thinnet is a good idea when you use it to seperate workgroups. rod ______________________________ Reply Separator _________________________________ Subject: Re: sniffers Author: "Jonathan M. Bresler" <jmb () kryten Atinc COM> at Internet Date: 4/30/95 7:02 AM
Is there any way to find out if a sniffer is on the net? Just this
no. absolutely none (per SANS'95 conference) a sniffer can have its transmit lead cut and still function. this configuration is described in one of the common security papers--TAMU's tiger paper perhaps, i dont remember. with the transmit lead cut, you cant detect. now a good capture digital ocilloscope and a one shot pulse generator may allow you to see the reflections at each tap (imperfect impedence matching of coax and taps procudce reflections) the time from pulse to reflection is twice the travel time to the tap. a TDR (time domain reflectometer) does this. but the signal will be very weak. no standard network administrator equipment ;(
Current thread:
- Re: CGI script insecurity in NCSA httpd, (continued)
- Re: CGI script insecurity in NCSA httpd Jeremy Fitzhardinge (Apr 27)
- sniffers froden () yf-kraft no (Apr 28)
- Re: your mail Timothy Newsham (Apr 30)
- sniffers Theodore Alexopoulos (Apr 29)
- Re: sniffers Jonathan M. Bresler (Apr 29)
- Re: sniffers Asriel DeCatte (Apr 30)
- Re: sniffers Asriel DeCatte (Apr 30)
- Re: sniffers Jas (Apr 30)
- Re: sniffers Asriel DeCatte (Apr 30)
- Re: sniffers Jonathan M. Bresler (Apr 30)
- Re[2]: sniffers Nayfield, Rod (Apr 30)
- Re: SUMMARY: AntiFlash talkd Aleph One (Apr 24)
- Re: SUMMARY: AntiFlash talkd Gary Anderson (Apr 24)
- The Dan Farmer rap - authors note Julian Assange (Apr 24)
- Re: SUMMARY: AntiFlash talkd Marek Michalkiewicz (Apr 25)