Re: Telnet concerns from auditors

I know that therecan be all sorts of activity going on. But, I havereceived
calls from a user whose application I support. She would complain that she is
getting poor response from the Windows server where the application resides. That slow performance coincides with a graphical display of high traffic. This
application only runs on my pc. I presume that this application puts the
network card in my computer into promiscuous mode. But, if I am on a switch, I
should not see anything except traffic between my computer and the computer. Correct?

John McKee


Quoting Charles Wilt <charles.wilt@xxxxxxxxx>:

Even if you're doing nothing, the OS and many applications may be
communicating in the background.

Charles

On Fri, Oct 3, 2008 at 4:41 PM, John McKee <jmmckee@xxxxxxxxxxxxxx> wrote:

Quoting David Gibbs <david@xxxxxxxxxxxx>:

Charles Wilt wrote:

In all fairness, this risk is lower now than it used to be due to the
use of network switches.

Explain that to an auditor.

If they are raising flags because of unencrypted authentication on
your network ... then the presence of a switch (instead of a hub)
isn't going to mater one iota.

david

I have an application on my computer at work called NetPerSec. It
shows network
activity, at some level. It was my understanding (since I don't work with the
networking part) that we used several switches. So, why do I see network
activity with this program? Am I not actually connected via a switch? I can
sit here, do nothing, and watch the activity change over time.

John McKee



--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.