NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] windump on FW-1???



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> -----Original Message-----
> From: Tony Miedaner [mailto:[email protected]]
> Sent: Monday, December 11, 2000 3:02 PM
> 
> Does anybody know if I can run windump on the same box as 
> fw-1 NT without
> interference with FW-1.  My guess is yes.


You guessed right. You can run Windump, ngrep, dsniff, snort, and
whatever else uses the LibNet and/or PCap drivers. They read the
traffic from underneath the FW-1 in promiscuous mode so you see all
the packets. I have snort integrated with FW-1's SAM and have no
problems.

Regards,
Frank

-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.5.1
Comment: PGP or S/MIME encrypted email preferred.

iQA/AwUBOjW3KURKym0LjhFcEQIaJQCcDlqvlXsD0uB2JYyWJOWKBKaL9QwAoKus
GzwwyhCdQXaTvGVPcFeU2r3y
=VEFD
-----END PGP SIGNATURE-----


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.