Maximum Security, Fourth Edition

Chapter 15. Sniffers

IN THIS CHAPTER

• Sniffers as Security Risks

• What Level of Risk Do Sniffers Represent?

• Has Anyone Actually Seen a Sniffer Attack?

• What Information Do Sniffers Capture?

• Where Is One Likely to Find a Sniffer?

• Where Can I Get a Sniffer?

• Defeating Sniffer Attacks

Sniffers are devices that capture network packets. Their legitimate purpose is to analyze network traffic and identify potential areas of concern. For example, suppose that one segment of your network is performing poorly: packet delivery seems incredibly slow, or machines inexplicably lock up on a network boot. You can use a sniffer to determine the precise cause.

NOTE

The term sniffer is derived from a product, called the Sniffer, originally manufactured by Network General Corporation. ...