PACKET SNIFFER AS A NETWORK INTRUSION DETECTION TECHNIQUE

ABSTRACT
A packet sniffer (also known as a protocol analyzer) is computer software that can intercept and log traffic passing over a digital network or a part of a network. As data streams travel back and forth over the network, the sniffer captures each packet and eventually decodes and analyses its content according to the appropriate RFC or other specification. A sniffer can also be used legitimately to capture data being transmitted on a network. A network router reads every packet of data passed to it, determining whether it is intended for a destination within the routers own network or whether it should be passed further along the internet. A router with a sniffer however may be able to read the data in the packet as well as the source and destination addresses. Sniffers are often used on academic networks to prevent traffic bottlenecks caused by file-sharing application. This report presents a packet sniffer, sometimes referred to as a network monitor or network analyzer that can be used legitimately by a network or system administrator to monitor network traffic.

CONTENTS
Abstract 1. INTRODUCTION 1.1 Types of IDS 2. SNIFFER TECHNIQUE 3. PACKET SNIFFER 3.1 Different Types of Network 3.2 Sniffing Methods in a Switch 4. TESTING 5. REQUIREMENT SPECIFICATION 6. DATA FLOW DIAGRAM IN A SNIFFER 6.1 Sniffer: Module1 6.2 Sniffer options 6.3 Sniffer Packet Details 7. USES OF PACKET SNIFFER 8. TYPES OF PACKET SNIFFER AVAILABLE 9. SUMMARY Bibliography