Question: How best to detect a packet sniffer running on a network? Are there particular packets that they put out - or are they totally passive? Nope, no way to detect it. They simply sit and ...

Sniffers are tools — sometimes referred to as network analyzers — commonly used for monitoring network traffic. The term packet sniffing refers to the technique of copying individual packets as they ...

If you ever need network sniffing help or expertise, Laura is one of the best in the world. Great in person. Great speaker. I highly recommend any of her books, podcasts, and tutorials. Her web site, ...

I have been asked by a customer to install a kind of "black box" on his network for PCI compliance. It needs to do a variety of things, like be an IDS, packet sniffer, and use tools like nessus, nmap, ...

There are a host of fancy packet sniffers and protocol analyzers available to aid in diagnosing network traffic problems. Yet, one tool that is powerful in its own right, and is free to boot, is ...

In the previous article, I discussed the installation of three open-source packages on a computer running Linux to capture useful network statistics. Using Linux is economical simply because it can ...

A packet monitor, or network sniffer, is a program that lets you monitor the network traffic flowing over a computer's network devices down to the individual packet level. When Pktmon was first ...

The value of capturing and analyzing network traffic is well-established. After all, the generic “sniffer” has been a fixture of networking since the days of “datascopes” on RS-232 connections. But ...

In security, the tools that give us the greatest visibility often become the most powerful and the most useful. Chief among those tools for visibility at the network level is Wireshark. It has been -- ...

“Promiscuous mode” (you’ve gotta love that nomenclature) is a network interface mode in which the NIC reports every packet that it sees. If you’re using the Wireshark packet sniffer and have it set to ...