On Sat, 28 Apr 2001, marty wrote:
> is there a tool that captures ethernet frames?
Yes. It's called a sniffer. I believe there's even a Linux tool which will
perform the same job, although the name escapes me at the moment.
Won't do you any good, though, unless the spoofed packets are coming from
inside your network. The mac address of the packets will always have the
interface of the next router in the chain, which invalidates your quest to
find the originator.
If they're internal to your network, then a sniffer will do the job.
DaZZa
--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug
