PromiScan Network Utilities and Monitoring

PromiScan - Network Utilities and Monitoring

PromiScan is a sniffing node detection tool and has been used worldwide ever since its release. Promiscan is one of the tools mentioned in the 2003 SANS/FBI Top 20. PromiScan 3.0 (commercial version) has improved its monitoring capabilities by providing continuous monitoring to detect promiscuous applications starting and ending without increasing the network load.

Today, many examples of information leaks from corporations can be seen in recent headlines and potential network sniffing by malicious insiders could represent a significant threat to many corporations. Network sniffing enables listeners to listen in on all network communications and to obtain passwords to gain unauthorized access to a server, which could result in divulging mission-critical corporate data.

Still, no effective measures to prevent network sniffing have been implemented to date. By simply activating sniffing software, an individual with malicious intent can passively accept all packets, regardless of their destination addresses, without sending any suspicious packets. For this reason, it's extremely difficult to detect sniffers. PromiScan 3.0 is an innovative application software for remotely monitoring computers on local networks to locate network interfaces operating in a promiscuous mode that illegally accepts all packets. PromiScan 3.0 continuously monitors traffic to detect sniffing programs starting and ending and alert the administrator. By installing PromiScan 3.0, you can detect network sniffing immediately and can even prevent potential sniffing activities by people inside your intranet.

Cyclic scanning In the Cyclic Scan mode, you can perform cyclic scanning to monitor network interface state changes. In this mode, network interface state changes caused by starting or ending a network analyzer such as Ethereal can be detected to obtain more reliable detection results.

Slow scanning supported Scanning speed can be selected. Making it higher allows you to scan your network without adding any additional network load.

Logging In the Cyclic Scan mode, network interface state changes can be browsed and written into a log file. This log file can be viewed by the other systems.

Node Viewer Network interface state changes of specified computers can be displayed in chronological order for monitoring.

Warning Window When you are in the Cyclic Scan mode, if a network interface state change caused by starting and ending a promiscuous application is detected, a warning window pops up.

Logging with SYSLOG If you use SYSLOG for logging data, PromiScan installed in two or more segments can be monitored at a central location with commercial SYSLOG monitor software, thus enabling centralized network monitoring.