-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> -----Original Message-----
> From: Tony Miedaner [mailto:[EMAIL PROTECTED]]
> Sent: Monday, December 11, 2000 3:02 PM
>
> Does anybody know if I can run windump on the same box as
> fw-1 NT without
> interference with FW-1. My guess is yes.
You guessed right. You can run Windump, ngrep, dsniff, snort, and
whatever else uses the LibNet and/or PCap drivers. They read the
traffic from underneath the FW-1 in promiscuous mode so you see all
the packets. I have snort integrated with FW-1's SAM and have no
problems.
Regards,
Frank
-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.5.1
Comment: PGP or S/MIME encrypted email preferred.
iQA/AwUBOjW3KURKym0LjhFcEQIaJQCcDlqvlXsD0uB2JYyWJOWKBKaL9QwAoKus
GzwwyhCdQXaTvGVPcFeU2r3y
=VEFD
-----END PGP SIGNATURE-----
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
