Re: Detecting Sniffers?

2002-02-22 Thread Ashish Gupta
Hi, See section 2.5 of http://www.robertgraham.com/pubs/sniffing-faq.html It may help Ashish Sumit Dhar wrote: > Hello All, > > I was wondering the other day as to how one could go about detecting a > sniffer on the network. If it is a Shared Ethernet, I wouldn't even > try... but on a Switched

Re: TCP ports

2001-12-21 Thread Ashish Gupta
> > > Thanks > > Sathish Gowda > > > Search the web, that info is easy to find. > > 137 and 139 are used by Microsoft's NetBIOS over TCP/IP. > > Brent Best place for all you will ever need is rfc1340. But be prepared to get overwhelmed. Cheers Ashish Gupta

Cisco HDLC decodes

2001-11-19 Thread Ashish Gupta
Hi All, Does any one know of any tool which converts Cisco HDLC packets from libpcap to sniffer formats. Ashish Gupta

Re: Firewalling on FreeBSD

2001-10-19 Thread Ashish Gupta
This is slightly difficult to judge without much logging .. try the command ftp -d foo.bar.org to enable debugging messages and then see what pops up. Also check the firewall logs in /var/log to see what is the last packet from that ip which has been rejected. Does it have a port number that y

Re: Syn Flood generator / Dos Attack generator

2001-10-05 Thread Ashish Gupta
Try at http://www.technotronic.com/denial.html http://www.astanetworks.com/resources/about/attack_tools.html cheers ag Pradeep Kumar wrote: > Folks > > Does any know any tool which can generate Syn Floods / DoS attacks. > This is for lab testing purposes. > > -Kumar

Re: Traffic from port 25 to high ports?

2001-10-01 Thread Ashish Gupta
Well there might be a typical case of Port Forwarding which is typical of ssh. For example I can say that forward all the traffic on port 25 of a machine X to port 33543 of machine Y using SSH. Where in some cases X and Y can be the same machine. Cheers, ag Matt Simonsen wrote: > I am

Re: ARP_RARP capture

2001-10-01 Thread Ashish Gupta
laura isko wrote: > ??? > > I've got a WinMe with a modem. > > I wanted to test an NT Server app so I built an NT 4 server. But it > needed internet access. > > I installed WinProxy on the WinMe and plugged both boxes into a hub. > The WinMe inside is: 192.168.1.1, the NT is 192.168.1.

Re: help needed....

2001-09-25 Thread Ashish Gupta
cookie surfin wrote: > hi friends, > > i need a help from u...i m using winsniffer 2.1 version at my company > which is having small LAN containing 25 systems...on the way i m > interested to run packet sniffer, software on that...so i downloaded > winsniffer i used it..i didn't any respon

Re: DoS attack ...

2001-09-25 Thread Ashish Gupta
"[EMAIL PROTECTED]" wrote: > Hi All: > > I recently got nailed by a DoS attack. Can anyone recommend a bandwidth > monitoring tool that will show realtime usage (or even accumulated usage > summarized by node) across the entire network without using SNMP? I have > found several ones that o