Re: [Full-Disclosure] Caching a sniffer

[Chris Adams <chris@xxxxxxxxxxxxxx>]

On Mar 10, 2004, at 13:13, Patricio Bruna V. wrote:
> How can i know if there a sniffer running in my network?

You might catch someone sloppy with tricks like DNS resolution (send 
data with a hostname / IP and see who resolves it) or bugs in the way 
the sniffing host handles things like ARP resolution (search for 
antisniff if you want a tool which does this) - other than that, 
there's really no way to find a sniffer. Your best bet is to use strong 
encryption so it no longer matters if someone is sniffing traffic.

Chris

Attachment: smime.p7s
Description: S/MIME cryptographic signature