Spector CNE

[hboogz]

I have a feeling there is some monitoring going on some machines using the above program.

I've ran currports and tcpview and don't see anything unrecognizable. In the event the above program doesn't establish a tcp or udp session with a server -- how can i detect if monitoring is going on with spector ?

[Sparda]

You could arp poison the switch and use ethereal to closly monitor traffic.

[hboogz]

would i need two nics on my machine ?

how would i setup the switchport configuration. make my, the management station, as the monitor port ?

arp poison with cain/abel ?

[rFayjW98ciLoNQLDZmFRKD]

You could get a cheep hub and listen in that way, or get a computer with two NICs and play man in the middle.