RE: Sniffing

["Zachary Mutrux" <zmutrux () compumentor org>]

The Perl script sniffer.pl on this page supposedly can be used to detect the
presence of the WinPcap driver, which is used by Ethereal, snort and other
packet sniffers. There are definitely sniffers that don't use WinPcap. 

I haven't used this script. I also think it was designed for use on NT. No
idea if it actually works. I'd like to hear if anyone has had good
experience with this, however.

zm 


> 2) Can Sniffing be detected using a Network Intrusion 
> Detection System and if yes then are there any Sniffing ways 
> which are not detected by NDIS?

Attachment: smime.p7s
Description: