RE: [Security400] How paranoid do you get?

["Walden H. Leverich" <WaldenL@xxxxxxxxxxxxxxx>]

>From: Jim Langston [mailto:jlangston@celsinc.com]
>...is on the local LAN.

But with switches instead of hubs the traffic is only seen on your physical
line and any combines upstream segments which should be under IS's control
anyway. Gone are the days of plugging a sniffer into any network port and
seeing all the traffic in the network. Now, if you are still using hubs...
<G>

-Walden

------------
Walden H Leverich III
President
Tech Software
(516) 627-3800 x11
(208) 692-3308 eFax
WaldenL@TechSoftInc.com
http://www.TechSoftInc.com

Quiquid latine dictum sit altum viditur.
(Whatever is said in Latin seems profound.)



-----Original Message-----
From: Jim Langston [mailto:jlangston@celsinc.com]
Sent: Tuesday, July 30, 2002 14:15
To: 'security400@midrange.com'
Subject: RE: [Security400] How paranoid do you get?


The other place besides between the OC3's where it is more likely someone
would want to sniff the data is on the local LAN.  But, if you have someone
at your company smart enough to figure out how to packet sniff accounting
info s/he should be in IS anyway.  And who can keep data from IS?

Regards,

Jim Langston

-----Original Message-----
From: Walden H. Leverich [mailto:WaldenL@TechSoftInc.com]

Mike,

<SNIP>

Where in this path to you think it's likely that someone will grab your
data? Is it possible, sure, anything  is possible, but it takes a fair bit
of equipment and skill to dig up a OC3 line between two ISPs and tap in
without bringing the line down. Then to watch all the data and find
something interesting... The only people doing that are the FBI with
Carnivore[1].

_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400)
mailing list To post a message email: Security400@midrange.com To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/security400
or email: Security400-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.