[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] RE: [FW1] windump on FW-1???
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > -----Original Message----- > From: Tony Miedaner [mailto:[email protected]] > Sent: Monday, December 11, 2000 3:02 PM > > Does anybody know if I can run windump on the same box as > fw-1 NT without > interference with FW-1. My guess is yes. You guessed right. You can run Windump, ngrep, dsniff, snort, and whatever else uses the LibNet and/or PCap drivers. They read the traffic from underneath the FW-1 in promiscuous mode so you see all the packets. I have snort integrated with FW-1's SAM and have no problems. Regards, Frank -----BEGIN PGP SIGNATURE----- Version: PGP Personal Privacy 6.5.1 Comment: PGP or S/MIME encrypted email preferred. iQA/AwUBOjW3KURKym0LjhFcEQIaJQCcDlqvlXsD0uB2JYyWJOWKBKaL9QwAoKus GzwwyhCdQXaTvGVPcFeU2r3y =VEFD -----END PGP SIGNATURE----- ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|