Tools to detect Sniffer
CPM
ftp://coast.cs.purdue.edu/pub/tools/unix/cpm/cpm.x.x.tar.gz
Ifstatus
ftp://coast.cs.purdue.edu/pub/tools/unix/ifstatus/ifstatus.x.x.tar.gz
Try to use ‘df’ to check the difference in filesystem size, since sniffer log grows very fast
Previous slide
Next slide
Back to first slide
View graphic version