its a routed and switched environment?

Question

how do i see if some one is using a network analyzer on my network,and maybe sound a alarm???

i use a wireless accespoint 2 but that is not my problem as i also use wep2.0 and mac addresses can also easily get spoofed and we are running tools for this. its a wired network and the Q. is more based for the internal network. i do believe its possible to detect if a analyzer is running on ur wires i just need to find out how to do it and what to use.

Answer 1

We need more date. Is this a wired network, or are there wireless users as well?

If it is wireless, upgrade wireless security to include WPA encryption with a very complex, strong preshared key (if you now have WPA in use, change the preshare key), change the ssid to a name that no one can pinpoint to you (e.g. do not use street number, "smith residence", etc as ssid as it is a give away), invoke MAC address validation (requires MAC address of each permitted wireless connector logged into the router). If your router cannot do this, see if a firmware upgrade will do this; if not consider a better router.

If it is wired, conduct a physical inspection of all terminals and look for rogue wireless devices and remove them. Look also for other rogue devices.

Once all this is done, you will have gone a long way. However, I do not beleive a network analyzer use can be detected.