Nayfield, Rod wrote: | Right. There is no way. one of smb's papers (and the book) mention using a | sniffer with transmit leads cut. | | The best protection would be to use switches instead of hubs... even a | multi-port bridge for thinnet is a good idea when you use it to seperate | workgroups. | | rod Right, no way to detect a sniffer with no transmit lead. But many funny way to kill it. All you need is 2 machines faster than the potential sniffer. -- dan ½If looks could kill, they probably will, ....╗