On Thursday 10 June 2004 03:37, Chadley Wilson wrote: > Hello friends, > > My network with approx 300 users is routed to the internet through > a proxy and firewall, we have a DNS server and PDC Server. > It is a winXplease network. > > With a linux PC connected - > What tools would you suggest I could use for the following: > > 1) Track an internal PC running a sniffer of some sort, obtain its > ip and mac address, then stop it sniffing and maybe kick it off the > network. > > 2) Be alerted when someone tries to sniff from outside, trace him > and obtain his details or ISP details. > There's some good info here. Section 2.5 directly addresses your questions: http://www.robertgraham.com/pubs/sniffing-faq.html Regards, Mike Klinke
