Hi,
Perhaps an obvious question as well, but just to make sure: you do run the
software as root right? Normal users can't put a device in promiscuous mode.
Grtz, Richard
-----Original Message-----
From: Jason Brown
To: [EMAIL PROTECTED]
Sent: 15-6-01 20:33
Subject: Network Sniffers
Hello All,
I am trying to set up a sniffer so I can see what the users are doing on
the
Internet and see if they are abusing the service.
To date I've install Ethereal and Ksnuffle but neither are working as
they
should.
I can sniff traffic to and from the machine running the software, but
the
rest of the network traffic is not visible.
According to all the documentation I found, the network cards are put
into
promiscuous mode automatically by the software. From what I can see,
it's
almost as if the cards are not.
I've installed the software on RedHat 6.2 and 7.1 and used 2 different
types
of NICs on 2 different machines, and one is a 3Com 590. Anybody know
why I
can't see everything???
What I want to do is generate a graph that will tell me how much NNTP
traffic in being pulled down. I know they are pulling down VCD files
and I
am 99% sure this is causing the slow response, but I'd like to have
proof
before I point fingers. Ksnuffle looks like it will work, but if
someone
else has another solution, please let me know.
Thanks,
Jason
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls
