I have a client that has asked me about the merits of some
spyware. The software he is looking at is called Spector.

I have a couple questions regarding this type of software
(as opposed to applying it towards hardware):

1: How does this software work?
   a)Does it require a local installation?
   b)Does it monitor traffic (IP) going it & out the firewall/gateway?

2: Is it possible to detect whether some (spyware) has been installed locally?

3: What would be the Linux equivalent?
   a)sniffit?
   b)tcpdump?
   c)other?

If this software is installed locally, and only meant for WinX,
can one assume that a Linux box (perhaps Knoppix) would be immune
to any monitoring?

Personally, I am amazed at the money spent on this monitoring. I think
you are just trying to prove what you already suspect and know.
Zero tolerance policies, to me, are more effective....and cheaper :-)

-- 
v/r
-Mike
---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change  you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss