Re: [SLUG] Sniff

From: Eben King (eben1@tampabay.rr.com)
Date: Wed Nov 02 2005 - 15:30:30 EST


On Wed, 2 Nov 2005, Jeffrey Kroll wrote:

> I was asked by my manager today to find a way to sniff AIM / YAHOO / ICQ
> client msg's leaving and coming into our network. Does anyone know of a
> free software solution that would do this on a Debian distro or a
> tarball'd item. I would be implementing this on a hub (so that all
> traffic is shown to the sniffing server) and that the application would
> run on a dedicated machine.

Maybe tcpdump, and tell it to show packets headed for or coming from
login.oscar.aol.com:5190, messenger.hotmail.com:1863, or
scs.msg.yahoo.com:5050. Course decoding the sender/recipient is up to you.
Maybe it'll be nice and be in plain text? "od" is probably your friend at
this point.

-- 
-eben    ebQenW1@EtaRmpTabYayU.rIr.OcoPm    home.tampabay.rr.com/hactar
SCORPIO:  Get ready for an unexpected trip when you fall screaming
from an open window.  Work a little harder on improving your low self
esteem, you stupid freak.  -- Weird Al, _Your Horoscope for Today_

----------------------------------------------------------------------- This list is provided as an unmoderated internet service by Networked Knowledge Systems (NKS). Views and opinions expressed in messages posted are those of the author and do not necessarily reflect the official policy or position of NKS or any of its employees.



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 19:34:55 EDT