[comp.unix.sysv386] How to read *any* IP/Ethernet packets on ethernet?

wangw@ul.ie (06/01/91)

Hello, netter!

(I am a new user, please forgive me if the question is novice)

Is there a way to read all the packets transmitting in the Ethernet? More
specifically is there a way to read all the IP packets or Ethernet packet
no matter what is the packet's destination address? The platform will be
unix running TCP/IP. I am doing network security so this is quite 
important. Any suggestions? Also I'll appreciate if you could tell me
some books/articles on unix security/bugs.

Please e-mail reply directly to me. Many thanks in advance!

Regards,

Weijun Wang  (E-mail: wangw@ul.ie)
Dept. of Electronics
Univ. of Limerick
Ireland

ires@kaspar.UUCP (Bruce R Larson) (06/02/91)

In article <17567.28468c14@ul.ie> wangw@ul.ie writes:
>Is there a way to read all the packets transmitting in the Ethernet? More
>specifically is there a way to read all the IP packets or Ethernet packet
>no matter what is the packet's destination address? ...  I am doing
>network security so this is quite important. Any suggestions? 

This question borders on the outrageous.

I will assume that your intention really is security and not espionage.

In that case, forget about packet snooping and get a smart router
or gateway that does packet filtering.  You have every right to
restrict access to and from your domain in any way that you wish,
but keep your nose out of those packets -- it has no business 
being there.


>Weijun Wang  (E-mail: wangw@ul.ie)
>Dept. of Electronics, Univ. of Limerick, Ireland

Bruce
-- 
Bruce R. Larson
Integral Resources, Milton MA
Internet:  blarson@ires.com
Uucp:  ..!{world|uunet}!ires.com!blarson