Ben wrote:
>
> > is it possible to detect if a machine and then which machine might be
> > sniffing the network if the machines are about 60 - 70 on that subnet.
> > It would be good to know if it is possible and then how if someone knows.
You can usually do this on Token-ring, but not Ethernet. It just isn't designed in there.
>
> You can use programs to detect if there are any ethernet adaptors in
> promiscuous mode.
>
This also isn't a good test, but it's a start. Some *IX machines go into promiscuous mode to
automatically build arp caches, do dpli (for IPX or NetBIOS) and other things.
--
Urban A. Haas |
Total Solutions Group |
Open Systems & Network Consultant |
(612) 831-8320 x133 |
Internet: uhaas @
tsg-usa .
com |
mailto:uhaas @
tsg-usa .
com -or- |
mailto:uhaas @
aol .
com |
|
|
