Security

Ask something
Discussion Locked

Security Solutions: Listen for alien devices

0 helpful
6 replies

by discussion

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

In this week's Security Solutions e-newsletter column, Mike Mullins discusses how and why you should listen for alien devices on your network. Do you periodically listen to your network? What tools do you use for network scanning? What tools would you recommend?

Here are the links to the tools mentioned in this week's column:

- Fping: www.fping.com

- SuperScan: www.foundstone.com

- Kismet: www.kismetwireless.net

- Network Stumbler: www.netstumbler.com

- Ettercap: ettercap.sourceforge.net

- Winfingerprint: winfingerprint.sourceforge.net

* When pasting links into your browser, remove any spaces.

----
If you'd like to learn more about the Security Solutions e-newsletter, point to this link and click Security Solutions to see a sample. If you're interested, you can also sign up:
http://nl.com.com/guest.jsp?brand=techrepublic&r eturn_to=https://www.techrepublic.com.com:8001/2001-1-0.html

6 replies

by someguy

Anyone working with computer and networking technology these days need to be aware of just what can happen to them if they don't clearly have the full, explicit written authority and consent they need to handle such equipment. Case in point would be a number of instances recently of IT consultants and workers being nailed with criminal charges for doing exactly what is being suggested in this article when they unintentionally trigger some IDS in the process of scanning their nets.

Earlier this year, the NACDL and EFF submitted a response to a request for comments on sentencing guidelines for violations of 18 USC 1030, the federal "computer fraud and abuse act". Their comments are very enlightening and highly disturbing.

The internet URL is:

http://cyberlaw.stanford.edu/about/cases/1030%20Comments%202-19-03.pdf

A site related to the above is here:

http://cyberlaw.stanford.edu/about/cases/federal_sentencing_guidel.shtml

And that's all about just ONE law, of course. You also need to be aware of all the other federal and state statutes and other laws and policies that are by design intended to be hostile and menacing to technical workers.

by carywinton41

As ususal Mike Mullins provides us with excellent information and resources. This information is obviously inteneded for network administrators with full "rights" to their network and equipment. I for one am very grateful for his excellent reports and wish i had the opportunity to work with him.
Respectfully,
Cary Pembleton
carywinton41@wmconnect.com

by robotech

Forgive my ignorance, but some of the downloads have weird extensions, e.g. fping-2.2b2.tar.gz
I don't know how to utilize a file with such an extension. How can I utilize a file like that on my Windows XP laptop?

Thanks

by fidalgomike

Robotech,
Tar is generally a UNIX/Linux archive format. Gz, Z, and the like indicate that the archive is compressed with one of the various compression algorithms. If I remember correctly, current versions of Winzip can extract these archives. That said however, you may want to consider setting up your laptop to dual boot WinXP and Linux.

by mike mullins

Robotech,

Don't worry about the different file extensions. I offered a download version for both windows and unix/linux OS. That way, depending upon the OS you're running on your workstation, you'll have acess to the same type of tool.

Mike Mullins

This discussion is closed to new replies.