Ethereal Post: 18829

Sponsored Content

Special Forums IP Networking Ethereal Post 18829 by Neo on Wednesday 3rd of April 2002 01:09:36 PM

04-03-2002

Administrator

If your network has controlled IP addresses and MAC addresses you can determine if a new device that is not authorized is on the network. This might help if you know that authorized users are not sniffing.... (based on trust and/or policy)... that depends on the size of your network under administration.

As PxT says, there is no way to know if a device is running a sniffer, except by looking at the device and seeing what software is installed and what processes are being executed.

Segmenting your traffic on a switch, as you suggest, helps, but if your device talks to devices outside the segment or across the switch, then the problem still exists... for example, when you talk to 'me' from your place, then people will be able to sniff from many points across the Internet.

If you need confidentiality, then I recommend you look at different cryptographic systems such as SSH, OpenSSH, SSLeay, PHP and a host of other cryptographic systems available to insure your traffic invisible to sniffers.

Neo

View Public Profile for Neo

Visit Neo's homepage!

Find all posts by Neo

10 More Discussions You Might Find Interesting

1. IP Networking

Ethereal

Hi, I work with an interface which connects to a Switch company and pulls information from certain sockets. During the night, somehow disconnects and it is difficult to prove if it is the interface or the Switch company responsible. I had the suggestion to install sniffers to do some network...

2. SCO

Ethereal for SCO OpenServer 5.0.7???

Which version of Ethereal can I use for SCO OpenServer 5.0.7???

3. SCO

Ethereal problems on SCO OpenServer 5.0.7

I have installed the Ethereal package (ethereal-0.8.14.pkg) on a SCO Openserver 5.0.7. Installation went OK but when I try to start Ethereal I get error messages about "linking problems". I have studied the SCO Technical article 116949 but my filenames differ from article. Please help!!

4. UNIX for Dummies Questions & Answers

Installing ethereal on red hat

Has anybody installed ethereal on red hat linux. If so how ?, ie a a step by step process. I 've been to ethereal.com but it says not to use the RPM's on the site. When I do attempt to install using binaries or RPM's the list of dependancies seems endless, ie it says I need x I try to install x and...

5. UNIX for Dummies Questions & Answers

Ethereal installation on unix

Hi , Has any one installed ethereal on a unix machien ?? I m trying to install it on an hpux 11i machine and getting the following error * Summary of Analysis Phase: ERROR: Exclude ethereal.ethereal-RUN,r=0.10.11 ERROR: Exclude ...

6. AIX

Ethereal and AIX 5.3

Hi to all .... i must install ethereal-0.8.18-1 on aix system , for do some problems determination about network problems . I have a .bff file of ethereal but for resolve dependencies i need this two .bff package needed : freeware.gtk+.rte 1.2.8.0 # Base Level Fileset...

7. Shell Programming and Scripting

interfacing ethereal

Hi All; plz suggest me any perl script to get the ethereal messeges.To be more specific, i need to write a perl script that when an ethereal tool is started and captures any traces, can get that trace......... :)

8. Shell Programming and Scripting

tracing ethereal traces

Hi All........ i need a perl script that can trace the traces of the ethereal tool. PLZ help me out...............!!!!!!!!!

9. Solaris

ethereal problem

I have installed ethereal on solaris 10. however I can execute the ./ethereal using the root account. if tried to execute same from non-root users i am facing the following error. ethereal: The capture session could not be initiated (/dev/ce: Permission denied). Please check to make sure...

10. Solaris

Ethereal Solaris i386

Hello guys, I am trying to install ethereal in Solaris10 based on i386 system. But i can find only packet for sparc. Any idea? Thanks a lot!

LEARN ABOUT OSX

lo

LO(4)							   BSD Kernel Interfaces Manual 						     LO(4)

NAME

     lo -- software loopback network interface

SYNOPSIS

     pseudo-device
     loop

DESCRIPTION

     The loop interface is a software loopback mechanism which may be used for performance analysis, software testing, and/or local communication.
     As with other network interfaces, the loopback interface must have network addresses assigned for each address family with which it is to be
     used.  These addresses may be set or changed with the SIOCSIFADDR ioctl(2).  The loopback interface should be the last interface configured,
     as protocols may use the order of configuration as an indication of priority.  The loopback should never be configured first unless no hard-
     ware interfaces exist.

DIAGNOSTICS

     lo%d: can't handle af%d.  The interface was handed a message with addresses formatted in an unsuitable address family; the packet was
     dropped.

SEE ALSO

     inet(4), intro(4), ns(4)

HISTORY

     The lo device appeared in 4.2BSD.

BUGS

     Previous versions of the system enabled the loopback interface automatically, using a nonstandard Internet address (127.1).  Use of that
     address is now discouraged; a reserved host address for the local network should be used instead.

4.2 Berkeley Distribution					   June 5, 1993 					 4.2 Berkeley Distribution