home *** CD-ROM | disk | FTP | other *** search
- Newsgroups: alt.security
- Path: sparky!uunet!caen!zaphod.mps.ohio-state.edu!magnus.acs.ohio-state.edu!nhaldar
- From: nhaldar@magnus.acs.ohio-state.edu (Neil A Haldar)
- Subject: Re: Detecting an Ethernet Tap
- Message-ID: <1992Nov10.031126.14041@magnus.acs.ohio-state.edu>
- Sender: news@magnus.acs.ohio-state.edu
- Nntp-Posting-Host: magnusug.magnus.acs.ohio-state.edu
- Organization: The Ohio State University
- References: <12914@hq.hq.af.mil> <GUENTHER.92Nov9175156@amcl5.stolaf.edu>
- Date: Tue, 10 Nov 1992 03:11:26 GMT
- Lines: 38
-
- In article <GUENTHER.92Nov9175156@amcl5.stolaf.edu> guenther@stolaf.edu (Philip
- A Guenther) writes:
- >In article <12914@hq.hq.af.mil> rick@postmaster@hq.af.mil writes:
- >
- > Does anyone know of any software available that will detect a
- > tap of an ethernet cable? Assmuming that this is possible.
- >
- > I am looking at the ability to detect a tap in an ethernet cable and
- > have the software notify a network admin. We have etherhostprobe, which
- > works fine after the fact, but I am looking for something that monitors
- > the line and detects a tap or new device in real time.
- >
- > I am a novice at the physical aspects of ethernet. i.e., I am not
- > sure if it is even possible to detect such a thing. I assume that it is
- > possible to detect a voltage drop across the line or something similar.
- > Or perhaps detect new ethernet packets as soon as they hit the wire.
- >
- > Does anyone know of any products or methods for doing this sort of thing?
- >
-
- Additionally... couldn't you just have all machines plugged into the net send
- out some sort of ID packet at a specific interval? I mean... those machines
- with net access would be required to send out some sort of packet to all other
- devices...
-
- If one machine attempted to access various other machines on the net without
- providing a proper id sequence, root could be notified...
-
- Although there are several problems to overcome...
-
- Not to mention the increased network overhead...
-
- -Neil
- --
- *> Neil Haldar <*
- *> nhaldar@magnus.acs.ohio-state.edu <*
- *> neilh@well.sf.ca.us <*
- *> 364 West Lane Ave #225, Cols., OH 43201 614.299.8529 <*
-