Anyway, spending his time to watch users is really not a good approach,
from both a human and technical viewpoints.
cheers,
mouss
At 19:53 17/06/01 +0200, Richard de Jong wrote:
>Hi,
>
>Perhaps an obvious question as well, but just to make sure: you do run the
>software as root right? Normal users can't put a device in promiscuous mode.
>
>Grtz, Richard
>
>-----Original Message-----
>From: Jason Brown
>To: [EMAIL PROTECTED]
>Sent: 15-6-01 20:33
>Subject: Network Sniffers
>
>
>Hello All,
>
>I am trying to set up a sniffer so I can see what the users are doing on
>the
>Internet and see if they are abusing the service.
>
>To date I've install Ethereal and Ksnuffle but neither are working as
>they
>should.
>
>I can sniff traffic to and from the machine running the software, but
>the
>rest of the network traffic is not visible.
>
>According to all the documentation I found, the network cards are put
>into
>promiscuous mode automatically by the software. From what I can see,
>it's
>almost as if the cards are not.
>
>I've installed the software on RedHat 6.2 and 7.1 and used 2 different
>types
>of NICs on 2 different machines, and one is a 3Com 590. Anybody know
>why I
>can't see everything???
>
>What I want to do is generate a graph that will tell me how much NNTP
>traffic in being pulled down. I know they are pulling down VCD files
>and I
>am 99% sure this is causing the slow response, but I'd like to have
>proof
>before I point fingers. Ksnuffle looks like it will work, but if
>someone
>else has another solution, please let me know.
>
>Thanks,
>
>Jason
>
>_______________________________________________
>Firewalls mailing list
>[EMAIL PROTECTED]
>http://lists.gnac.net/mailman/listinfo/firewalls
>_______________________________________________
>Firewalls mailing list
>[EMAIL PROTECTED]
>http://lists.gnac.net/mailman/listinfo/firewalls
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls
