Network Sniffers

[allan]

What, if any, is your preference:

1. Network sniffers, such as SNORT.
2. Host sniffers, such as Tripwire.

Or a combination of both, and how effective do you think a network sniffer is as a security tool? How much time do you spend tweaking your signatures, so you are constantly being alerted?

[net-trend]

network sniffer a security tool? heck...i must be totally mis-educated....

all i use it for is to spy on my sister's icq password....lol....j/kidding...

i use it to monitor my WLAN....:)

[interactive]

OT I think. Is there any sort of a utility out there that would show me all MAC address on a LAN (not sure if there is have a peice of equipment that I need it for).

[allan]

Originally posted by interactive:

OT I think. Is there any sort of a utility out there that would show me all MAC address on a LAN (not sure if there is have a peice of equipment that I need it for).

On a local LAN, or a remote LAN? On a local LAN just issue the command: arp -a (this works on a Windows or a UNIX box).

On a remote LAN, there isn't a way to do this, ARP information is not passed outside of the network.

[interactive]

Local lan. It worked thanks a ton (well I think it did).