Is it safe to run tcpdump?

Michael L. Squires mikes at siralan.org
Sat Mar 5 19:32:48 UTC 2011


On Sat, 5 Mar 2011, erikmccaskey64 wrote:

> Is it safe to always run tcpdump on the server, e.g.: like this:
>
>
> tcpdump -qn dst net 192.168.1.0/24

Depends on who's watching; running tcpdump on a network managed by someone
else might be noticed by the network admin if they're looking for NICs
being run in promsicuous mode.  This is a red flag if you're looking for
someone running a password sniffer.

Mike Squires



More information about the freebsd-questions mailing list