Difficult. Depends on the sniffer used. Start with MS Sniffer, included with MS SMS. It ain't much good, but it will detect other using the same sniffer. This is the easiest part. If you are admin - check all hosts for specific software. If this is not possible, use antisniff from the l0pht. It looks for time delays caused by NIC's in promiscious mode. Read the manual at the same time and have patience. Detecting a sniffer is a time (and bandwidth) consuming task. It depends of course on the size and architecture of the network. If it is a switched network, you'll have to detect sniffers per segment. If you have finished reading Tolstoy's complete works you might have some certainty about active sniffers on the network. You'll probably not find inactive sniffers.Unless it's the MS sniffer.
Good luck. ----- Original Message ----- From: "Mario Camara" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, January 09, 2002 3:13 AM Subject: How can I detect someone sniffing my network? Can someone help me with that? M�rio C�mara [EMAIL PROTECTED] [EMAIL PROTECTED] ICQ: 331 335
