nanog mailing list archives
Re: sniffer/promisc detector
From: "Alexei Roudnev" <alex () relcom net>
Date: Wed, 21 Jan 2004 23:38:52 -0800
Yes. But making a bomber "stealth" means designing it to be difficult to detect by an opponent. It doesn't mean painting "I am Not a Bomber, I Am The Ice Cream Man" on the side and hoping nobody takes a second glance at it.
This works as well. 6 years ago we set up faked telnet services, which writed out login/password and reported 'no more processes', run a few faked telnet sessions (so that sniffers could record them) and then tracked an attempts to login. 'I am ice cream man' is a pretty good idea. Of course, if anyone will do it., Internet became some kind of 'Made man house' (it is already, isn't it?)
Current thread:
- Re: sniffer/promisc detector, (continued)
- Re: sniffer/promisc detector Alexei Roudnev (Jan 21)
- Re: sniffer/promisc detector Fyodor (Jan 22)
- Re: sniffer/promisc detector Alexei Roudnev (Jan 22)
- Re: sniffer/promisc detector Alexei Roudnev (Jan 22)
- Re: sniffer/promisc detector Ruben van der Leij (Jan 22)
- Re: sniffer/promisc detector Jason Slagle (Jan 22)
- Re: sniffer/promisc detector Ruben van der Leij (Jan 22)
- Re: sniffer/promisc detector Alexei Roudnev (Jan 22)
- Re: sniffer/promisc detector Andrew Simmons (Jan 23)
- Re: sniffer/promisc detector Alexei Roudnev (Jan 21)