Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Snooping around 1
- Thread starter hdeassis
- Start date
-
1
- #2
- Thread starter
- #3
Hi,
Sniffer Pro from NAI is pretty good at sniffing packets on the wire. You can configure it to trap all traffic to/from an IP address or MAC address or just individual protocols, etc. If your lan has switches and/or vlans in place then you have to make sure the PC you monitor from will pick up the 'target's traffic - i.e. is on the same switch/vlan or is otherwise definitely going to receive the packets you are interested in. I think its quite expensive though !!
Rgds
Sniffer Pro from NAI is pretty good at sniffing packets on the wire. You can configure it to trap all traffic to/from an IP address or MAC address or just individual protocols, etc. If your lan has switches and/or vlans in place then you have to make sure the PC you monitor from will pick up the 'target's traffic - i.e. is on the same switch/vlan or is otherwise definitely going to receive the packets you are interested in. I think its quite expensive though !!
Rgds
I would suggest taking an older pc and loading linux on it, then you can use tcpdump and/or many other applications that are
a) free
b) just as good (actually many are better) than the commercial packages
c) good to learn
Just my 2cents
You could make a darn good sniffer out of an old 486 or if you want to be extravegant... a pentium 133... and 32 mb ram ...
-John ---
John Hoke<br>
a) free
b) just as good (actually many are better) than the commercial packages
c) good to learn
Just my 2cents
You could make a darn good sniffer out of an old 486 or if you want to be extravegant... a pentium 133... and 32 mb ram ...
-John ---
John Hoke<br>
Forget that, if you have an NT environment, you can just enable auditing on the resources themselves, then add his/her name on the audited list. No need to get fancy with packet sniffing for this. This is where NT is very usefull, and very easy to setup.
Hi,
It's true that with M$/NT you can audit ntfs files/folders access, logons, logoffs and even printer use ! I stand to be corrected, but what you can't do monitor all network activity of a user - this is where you need s/w that puts the adapter into promiscious mode and listens to <everything> placed on the wire, i.e. a commercial packet sniffer or tcpdump, etc. A good reference on packet sniffing can be found at --> .
It all depends what you want .. another type of solution is 'spyware' that monitors absolutely everything - e.g. --> .
It's true that with M$/NT you can audit ntfs files/folders access, logons, logoffs and even printer use ! I stand to be corrected, but what you can't do monitor all network activity of a user - this is where you need s/w that puts the adapter into promiscious mode and listens to <everything> placed on the wire, i.e. a commercial packet sniffer or tcpdump, etc. A good reference on packet sniffing can be found at --> .
It all depends what you want .. another type of solution is 'spyware' that monitors absolutely everything - e.g. --> .
- Thread starter
- #8
Guest_imported
New member
- Jan 1, 1970
- 0
That guy who got put in Jail by his wife for
spying on her was using "eblaster" from:
spying on her was using "eblaster" from:
- Status
Similar threads
- Locked
- Question
- Locked
- Question