network sniffer

Michael Gargiullo mgargiullo at warpdrive.net
Tue Jun 8 14:42:50 UTC 2004


On Tue, 2004-06-08 at 10:24, Chadley Wilson wrote:
> Hi ther fellow penguins,
> 
> could some give me advise please,
> 
> I would like to use a tool in the consol with an interface that allows
> me to monitor connections throughout my intranet. It need to be able to
> intercept telnet and rlogin connections and display output from those
> connection.
> What can I use that is secure?

Put a box on a monitoring port of your switch.  run tcpdump piped to
grep for telnet or rlogin connections.  connect to the machine via ssh.

or

run snort and only run rules that check what you want to check for.  Use
a.c.i.d for a pretty interface

-Mike





More information about the fedora-list mailing list